Re: Add on_perl_init and proper destruction to plperl [PATCH]
От | David E. Wheeler |
---|---|
Тема | Re: Add on_perl_init and proper destruction to plperl [PATCH] |
Дата | |
Msg-id | BC68C490-A8F1-463E-A6F1-CD0B034F5949@kineticode.com обсуждение исходный текст |
Ответ на | Re: Add on_perl_init and proper destruction to plperl [PATCH] (Tom Lane <tgl@sss.pgh.pa.us>) |
Список | pgsql-hackers |
On Jan 27, 2010, at 4:33 PM, Tom Lane wrote: > [ shrug...] I see little point in repeating myself yet again. > It's obvious that the people who want this are entirely willing > to adopt a Pollyanna-ishly optimistic view about its potential > to cause serious problems that we may or may not be able to fix. Well, no. The problems you raise already exist in plperlu. And I would argue that they're worse there, as the DBA can giveothers permission to create PL/PerlU functions, and those users can do all kinds of crazy shit with them. on_perl_initcan be executed the DBA only. It's scope is far less. This is *safe* than PL/PerlU, while given more capabilityto PL/Perl. > I don't really expect to be able to prevent something along this line > from getting committed --- I'm merely hoping to circumscribe it as much > as possible and get large WARNING items into the manual's description. Oh, absolutely. Your sober attention to security issues is greatly appreciated by us fanboys. Best, David PS: I'm a PostgreSQL fanboy, not a Tom Lane fanboy. ;-P
В списке pgsql-hackers по дате отправления: