Received: from maia.hub.org (maia-2.hub.org [200.46.204.251]) by mail.postgresql.org (Postfix) with ESMTP id 3AF7C1337B64 for ; Tue, 15 Feb 2011 14:02:48 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.251]) (amavisd-maia, port 10024) with ESMTP id 96894-01 for ; Tue, 15 Feb 2011 18:02:40 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from snt0-omc2-s12.snt0.hotmail.com (snt0-omc2-s12.snt0.hotmail.com [65.55.90.87]) by mail.postgresql.org (Postfix) with ESMTP id 39AE01337B68 for ; Tue, 15 Feb 2011 14:02:39 -0400 (AST) Received: from SNT139-W41 ([65.55.90.73]) by snt0-omc2-s12.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 15 Feb 2011 10:02:38 -0800 Message-ID: Content-Type: multipart/alternative; boundary="_fa086da5-eb5c-46b4-bf30-a079f7ee6d0b_" X-Originating-IP: [189.174.125.162] From: Fabricio To: , Subject: Re: mapping libraries Date: Tue, 15 Feb 2011 11:02:39 -0700 Importance: Normal In-Reply-To: References: , <1297327420.3709.101.camel@lenovo01-laptop03.gunduz.org>, , , , MIME-Version: 1.0 X-OriginalArrivalTime: 15 Feb 2011 18:02:38.0744 (UTC) FILETIME=[88393980:01CBCD3A] X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=1.575 tagged_above=-10 required=5 tests=BAYES_00=-1.9, FREEMAIL_ENVFROM_END_DIGIT=1.553, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1.929, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RFC_ABUSE_POST=0.001, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: * X-Archive-Number: 201102/126 X-Sequence-Number: 36765 --_fa086da5-eb5c-46b4-bf30-a079f7ee6d0b_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable no no no... is not about upgrade libraries=2C is about a super user fail= ing to "create function ... language c" and with this avoid a super user ge= ts a shell creating the function "system()" in the libc.so. In postgres 8.2= every library intented for use with postgres must carry a magic block to i= dentify itself=2C but for the moment a can't upgrade a server. I know this = is very old but is just a question :). I think the only way is updrade and = not use super users=2C but if I upgrade and I need a super user for load da= ta with copy command and this is a operating system user too for upload de = data to the server=2C What avoid that the user load libraries like system()= with the magic block and gets access to the cluster database with user pos= tgres? thank Gerhard regards... = = =20 > Date: Tue=2C 15 Feb 2011 08:10:14 +0100 > Subject: Re: [ADMIN] mapping libraries > From: gerhard.hintermayer@gmail.com > To: pgsql-admin@postgresql.org >=20 > What exactly do you mean ? Upgrade libraries which postgres depends on > while the server is running ? Depends on the distro I think. I did > this with gentoo=2C e.g. upgrade glibc while postgres (and other > services) still use the old version. Except from memory issues (both > versions have to be kept in memory) there should'nt be a problem. Next > time postmaster is started (and hopefully does start :-) ) the new > libraries will be used. >=20 > Gerhard >=20 > On Tue=2C Feb 15=2C 2011 at 6:34 AM=2C Fabricio w= rote: > > Any comment about this? > > > > Regards... > > > > > > ________________________________ > > From: fabrixio1@hotmail.com > > To: pgsql-admin@postgresql.org > > Subject: [ADMIN] mapping libraries > > Date: Thu=2C 10 Feb 2011 18:19:33 -0700 > > > > > > Hi... > > If i can't upgrade a server with postgres 8.1 and at this time i can't > > delete a super user=2C Is there any way to avoid that the super user ma= pping > > libraries in C code? like system in libc.so ? > > regards... > > >=20 > --=20 > Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) > To make changes to your subscription: > http://www.postgresql.org/mailpref/pgsql-admin = --_fa086da5-eb5c-46b4-bf30-a079f7ee6d0b_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

no no no... is not about upgrade libraries=2C is about  =3Ba  = =3Bsuper user  =3Bfailing to "create function ... language c" and with = this avoid a super user gets a shell creating the function "system()" in th= e libc.so. =3BIn= postgres 8.2 every library intented for use with postgres must carry a mag= ic block to identify itself=2C but for the moment a can't upgrade a server.=  =3B
I know this is very old but is just a question :). =3B
I think the = only way is updrade and not use super users=2C but if I upgrade and I need = a super user for load data with copy command and this is a operating system= user too for upload de data to the server=2C What avoid that the user load= libraries like system() with the magic block and gets access to the cluste= r database with user postgres?

thank  =3BGerhard

regards...  =3B &nbs= p=3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  = =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B=  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B &n= bsp=3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  = =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B=  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B &n= bsp=3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  = =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B=  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B &n= bsp=3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  = =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B  =3B=  =3B  =3B
>=3B Date: Tue=2C 15 Feb 2011 = 08:10:14 +0100
>=3B Subject: Re: [ADMIN] mapping libraries
>=3B From: gerhard.hin= termayer@gmail.com
>=3B To: pgsql-admin@postgresql.org
>=3B
>=3B What exactly do = you mean ? Upgrade libraries which postgres depends on
>=3B while the server i= s running ? Depends on the distro I think. I did
>=3B this with gentoo=2C e.g.= upgrade glibc while postgres (and other
>=3B services) still use the old vers= ion. Except from memory issues (both
>=3B versions have to be kept in memory) = there should'nt be a problem. Next
>=3B time postmaster is started (and hopefu= lly does start :-) ) the new
>=3B libraries will be used.
>=3B
>=3B Gerhard<= br>>=3B
>=3B On= Tue=2C Feb 15=2C 2011 at 6:34 AM=2C Fabricio <=3Bfabrixio1@hotmail.com&g= t=3B wrote:
>=3B >=3B Any comment about this?
>=3B >=3B
>=3B >=3B Regards...
>=3B= >=3B
>=3B >=3B
>=3B >=3B ________________________________
>=3B >=3B From: f= abrixio1@hotmail.com
>=3B >=3B To: pgsql-admin@postgresql.org
>=3B >=3B Subje= ct: [ADMIN] mapping libraries
>=3B >=3B Date: Thu=2C 10 Feb 2011 18:19:33 -0= 700
&= gt=3B >=3B
>=3B >=3B
>=3B >=3B Hi...
>=3B >=3B If i can't upgrade a =3Bs= erver =3Bwith postgres 8.1 and at this time i can't
>=3B >=3B delete a s= uper user=2C Is there any way to avoid that the super user mapping>=3B >=3B= libraries in C code? like system in libc.so ?
>=3B >=3B regards...>=3B >=3B=
>= =3B
= >=3B --
>=3B Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org= )
>= =3B To make changes to your subscription:
>=3B http://www.postgresql.org/mailp= ref/pgsql-admin
= --_fa086da5-eb5c-46b4-bf30-a079f7ee6d0b_--