pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Andrew Gierth <andrew@tao11.riddles.org.uk>
To: prasanna rk <prasanna2mail@gmail.com>
Cc: pgsql-admin@lists.postgresql.org
Subject: Re: Disable copy function
Date: Fri, 30 Nov 2018 09:18:01 +0000
Message-ID: <8736rjlyfd.fsf@news-spur.riddles.org.uk> (raw)
In-Reply-To: <CADzxCafS3RtPKJh1Afp0s7zvthhGXqZCgsw-p2QJVO_W3+mPrQ@mail.gmail.com>
References: <CADzxCafS3RtPKJh1Afp0s7zvthhGXqZCgsw-p2QJVO_W3+mPrQ@mail.gmail.com>

>>>>> "prasanna" == prasanna rk <prasanna2mail@gmail.com> writes:

 prasanna> Hi Team
 prasanna> How do I disable copy option from database, i understand
 prasanna> usually this option will be available only for super user,
 prasanna> however we need to disable fully from DB.. please advice

Why?

Notice that the superuser has other ways to read and write files (for
example lo_import/lo_export, pg_read_file, using ALTER SYSTEM to
change the log directory and filename, loading a module to call the OS,
using file access functions in any untrusted language, etc. etc.)

-- 
Andrew (irc:RhodiumToad)




view thread (5+ messages)  latest in thread

Message-ID: <8736rjlyfd.fsf@news-spur.riddles.org.uk>
Permalink:  ../8736rjlyfd.fsf@news-spur.riddles.org.uk/
Also on:    postgresql.org/message-id/8736rjlyfd.fsf@news-spur.riddles.org.uk

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: andrew@tao11.riddles.org.uk, prasanna2mail@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: Disable copy function
  In-Reply-To: <8736rjlyfd.fsf@news-spur.riddles.org.uk>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox