pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Ron <ronljohnsonjr@gmail.com>
To: pgsql-admin@lists.postgresql.org
Subject: Re: RDS and postgres extension approval
Date: Thu, 21 Oct 2021 21:28:50 -0500
Message-ID: <931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com> (raw)
In-Reply-To: <CAKFQuwYt1WJ0rUOAVONndioLfz_hzFRQKOpcGQU80L==0M_o4g@mail.gmail.com>
References: <CAOC+FBXoX1wYSrownCOAYwetebA9ghKE9q_XThrn_eMiY4thwA@mail.gmail.com>
	<CAKFQuwbZjgktk2RcAaGXjg-2jSLwob8RHMJ57DMRDnUH4R7=mg@mail.gmail.com>
	<CAOC+FBVBCcRgB8WGu0-ophNN0_5nmBTbtcvmTkGKPqOjq3R_bg@mail.gmail.com>
	<CAKFQuwYt1WJ0rUOAVONndioLfz_hzFRQKOpcGQU80L==0M_o4g@mail.gmail.com>

On 10/21/21 8:50 PM, David G. Johnston wrote:
> On Thu, Oct 21, 2021 at 6:48 PM Wells Oliver <wells.oliver@gmail.com 
> <mailto:wells.oliver@gmail.com>> wrote:
>
>     Is there anything out there written about what trusted means? The PG
>     community seems pretty trusting :)
>
>
> It basically means the programming language allows the author of the code 
> to*break out of the server and access the underlying operating system* as 
> the postgres user.  I believe this is written in the docs - but I haven't 
> searched recently.
>
Which -- by design -- RDS won't let you do.  Thus, the lack of untrusted 
modules.

-- 
Angular momentum makes the world go 'round.

view thread (11+ messages)  latest in thread

Message-ID: <931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com>
Permalink:  ../931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com/
Also on:    postgresql.org/message-id/931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
  Subject: Re: RDS and postgres extension approval
  In-Reply-To: <931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox