Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mdkIj-0001Lt-G5 for pgsql-admin@arkaria.postgresql.org; Fri, 22 Oct 2021 02:28:57 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1mdkIi-0005OL-Cv for pgsql-admin@arkaria.postgresql.org; Fri, 22 Oct 2021 02:28:56 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mdkIi-0005OB-0d for pgsql-admin@lists.postgresql.org; Fri, 22 Oct 2021 02:28:56 +0000 Received: from mail-ot1-x330.google.com ([2607:f8b0:4864:20::330]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1mdkIf-0004Le-49 for pgsql-admin@lists.postgresql.org; Fri, 22 Oct 2021 02:28:55 +0000 Received: by mail-ot1-x330.google.com with SMTP id p6-20020a9d7446000000b0054e6bb223f3so2774067otk.3 for ; Thu, 21 Oct 2021 19:28:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=Ckuoa3tJ1otlxJQpAk99fpRwDDth7f0aC7sXyoDsRzE=; b=bmhyDU7/D885GeW7BZO2huSLnIU5+Uw0dBru2yADaTTVg0X9EvfQGAC9ZhRZZMXzBW bexjqv8uXj6tQdSGzxNbOnfqqc/mjKLdTdMAEfiJk+QjJ66q04Vp6ZVbfWOX2Z3THzqD ppkuv0/QYKsqPkRJYp0Wkmc+JQoQXrFprdkBWflR5cXnP0A3Mzvx/DNZIMIwKjs5K0Xg gJWaqLqSksZl4SytAfef9NkcGrlKoHIlE+cZivRKNhkt5ahfpPUz+gCDJTIFCqJyS5c3 ACzrso3Xm9jrcYwY8w2+yf/aw0TCjkTp0iBX4fGle4YPfFvpc7AxujEPSuF60tdAffH8 KGvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=Ckuoa3tJ1otlxJQpAk99fpRwDDth7f0aC7sXyoDsRzE=; b=xP2GN7+t69Kntr7q19npw8BQyx+y2sD+3n4ohM+XSq44u46AFTbg12h/74fx/9uyCX VBvWdBHfXLPEjdIIigNZv8pVO/ZrGNCqksyUd9VZXGkje0tmbsYOfg+dWWQlxw1Xui+n 6dI/PsrtZQQvcBTs33sJWn8AtCd9ztOvWqEb5F7EGH3kYIVJBqmftLqXZo+VAnn8LgWt ic230tVfUthvRVeC3HsWICRjMQ5uJrhPJHtkbR5yZU3HMl/g9NcRe8b5kYIug2JbenhQ DoN0e41Fyh7HKWIVzgOX++24rcStqIiE0/FLjJ3GBarNOnYopn+EJlnnEfA/o4rUNCjj fecA== X-Gm-Message-State: AOAM5307nemhmrlwAZuGYm0+0+JPF9Y/a+nnj3J6foLMBvI5ieYlVPC9 qMzvFO7zqyMmlvK5Z3+ZdFh6b9/4Yeo= X-Google-Smtp-Source: ABdhPJz52/nVKlCeaqXNjoews1n6wojno+CnicHmbCi5ogoyed/b9eShKKU3qGDaj1HfQEZOcir8SA== X-Received: by 2002:a05:6830:1f27:: with SMTP id e7mr7807801oth.346.1634869732098; Thu, 21 Oct 2021 19:28:52 -0700 (PDT) Received: from [192.168.88.10] (ip68-11-68-85.no.no.cox.net. [68.11.68.85]) by smtp.googlemail.com with ESMTPSA id r14sm1638626oiw.44.2021.10.21.19.28.51 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 21 Oct 2021 19:28:51 -0700 (PDT) Subject: Re: RDS and postgres extension approval To: pgsql-admin@lists.postgresql.org References: From: Ron Message-ID: <931ded5b-c8da-5ebc-9f48-637d9a3de015@gmail.com> Date: Thu, 21 Oct 2021 21:28:50 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------878A57161D966A49891F08EA" Content-Language: en-US List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is a multi-part message in MIME format. --------------878A57161D966A49891F08EA Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit On 10/21/21 8:50 PM, David G. Johnston wrote: > On Thu, Oct 21, 2021 at 6:48 PM Wells Oliver > wrote: > > Is there anything out there written about what trusted means? The PG > community seems pretty trusting :) > > > It basically means the programming language allows the author of the code > to*break out of the server and access the underlying operating system* as > the postgres user.  I believe this is written in the docs - but I haven't > searched recently. > Which -- by design -- RDS won't let you do.  Thus, the lack of untrusted modules. -- Angular momentum makes the world go 'round. --------------878A57161D966A49891F08EA Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit On 10/21/21 8:50 PM, David G. Johnston wrote:
On Thu, Oct 21, 2021 at 6:48 PM Wells Oliver <wells.oliver@gmail.com> wrote:
Is there anything out there written about what trusted means? The PG community seems pretty trusting :)


It basically means the programming language allows the author of the code to break out of the server and access the underlying operating system as the postgres user.  I believe this is written in the docs - but I haven't searched recently.

Which -- by design -- RDS won't let you do.  Thus, the lack of untrusted modules.

--
Angular momentum makes the world go 'round.
--------------878A57161D966A49891F08EA--