From: Fabricio <fabrixio1@hotmail.com>
To: gerhard.hintermayer@gmail.com
To: pgsql-admin@postgresql.org
Subject: Re: mapping libraries
Date: Tue, 15 Feb 2011 11:02:39 -0700
Message-ID: <SNT139-w41BCB33B50492E263F8C68FED30@phx.gbl> (raw)
In-Reply-To: <AANLkTimm=wQgrzif5Q2Fg2+r5_gKWF5QCTqLdA-x-L9a@mail.gmail.com>
References: <AANLkTinp=a2gL8Ftk1PhGBzNadQWq1xkU=ki5b9gJc9x@mail.gmail.com>
<1297327420.3709.101.camel@lenovo01-laptop03.gunduz.org>
<AANLkTi=b07FQybN7Oxkqsuca02Rpxr3-_fB4rzd+HxVW@mail.gmail.com>
<SNT139-w5020FB73CB1D2BFF77318CFEEF0@phx.gbl>
<SNT139-w36251670E910B823BA2F80FED30@phx.gbl>
<AANLkTimm=wQgrzif5Q2Fg2+r5_gKWF5QCTqLdA-x-L9a@mail.gmail.com>
no no no... is not about upgrade libraries, is about a super user failing to "create function ... language c" and with this avoid a super user gets a shell creating the function "system()" in the libc.so. In postgres 8.2 every library intented for use with postgres must carry a magic block to identify itself, but for the moment a can't upgrade a server. I know this is very old but is just a question :). I think the only way is updrade and not use super users, but if I upgrade and I need a super user for load data with copy command and this is a operating system user too for upload de data to the server, What avoid that the user load libraries like system() with the magic block and gets access to the cluster database with user postgres?
thank Gerhard
regards...
> Date: Tue, 15 Feb 2011 08:10:14 +0100
> Subject: Re: [ADMIN] mapping libraries
> From: gerhard.hintermayer@gmail.com
> To: pgsql-admin@postgresql.org
>
> What exactly do you mean ? Upgrade libraries which postgres depends on
> while the server is running ? Depends on the distro I think. I did
> this with gentoo, e.g. upgrade glibc while postgres (and other
> services) still use the old version. Except from memory issues (both
> versions have to be kept in memory) there should'nt be a problem. Next
> time postmaster is started (and hopefully does start :-) ) the new
> libraries will be used.
>
> Gerhard
>
> On Tue, Feb 15, 2011 at 6:34 AM, Fabricio <fabrixio1@hotmail.com> wrote:
> > Any comment about this?
> >
> > Regards...
> >
> >
> > ________________________________
> > From: fabrixio1@hotmail.com
> > To: pgsql-admin@postgresql.org
> > Subject: [ADMIN] mapping libraries
> > Date: Thu, 10 Feb 2011 18:19:33 -0700
> >
> >
> > Hi...
> > If i can't upgrade a server with postgres 8.1 and at this time i can't
> > delete a super user, Is there any way to avoid that the super user mapping
> > libraries in C code? like system in libc.so ?
> > regards...
> >
>
> --
> Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
> To make changes to your subscription:
> http://www.postgresql.org/mailpref/pgsql-admin =
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: fabrixio1@hotmail.com, gerhard.hintermayer@gmail.com
Subject: Re: mapping libraries
In-Reply-To: <SNT139-w41BCB33B50492E263F8C68FED30@phx.gbl>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox