pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedDisable copy function
5+ messages / 4 participants
[nested] [flat]
* Disable copy function
@ 2018-11-30 03:46 prasanna rk <prasanna2mail@gmail.com>
2018-11-30 05:04 ` Re: Disable copy function David G. Johnston <david.g.johnston@gmail.com>
2018-11-30 09:18 ` Re: Disable copy function Andrew Gierth <andrew@tao11.riddles.org.uk>
0 siblings, 2 replies; 5+ messages in thread
From: prasanna rk @ 2018-11-30 03:46 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Hi Team
How do I disable copy option from database, i understand usually this
option will be available only for super user, however we need to disable
fully from DB.. please advice
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Disable copy function
2018-11-30 03:46 Disable copy function prasanna rk <prasanna2mail@gmail.com>
@ 2018-11-30 05:04 ` David G. Johnston <david.g.johnston@gmail.com>
1 sibling, 0 replies; 5+ messages in thread
From: David G. Johnston @ 2018-11-30 05:04 UTC (permalink / raw)
To: prasanna rk <prasanna2mail@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
On Thursday, November 29, 2018, prasanna rk <prasanna2mail@gmail.com> wrote:
> Hi Team
>
> How do I disable copy option from database, i understand usually this
> option will be available only for super user, however we need to disable
> fully from DB.. please advice
>
Modify the source code and recompile your own custom version. Don’t forget
to remove the select statement as well...
David J.
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Disable copy function
2018-11-30 03:46 Disable copy function prasanna rk <prasanna2mail@gmail.com>
@ 2018-11-30 09:18 ` Andrew Gierth <andrew@tao11.riddles.org.uk>
2018-11-30 09:34 ` Re: Disable copy function Ron <ronljohnsonjr@gmail.com>
1 sibling, 1 reply; 5+ messages in thread
From: Andrew Gierth @ 2018-11-30 09:18 UTC (permalink / raw)
To: prasanna rk <prasanna2mail@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
>>>>> "prasanna" == prasanna rk <prasanna2mail@gmail.com> writes:
prasanna> Hi Team
prasanna> How do I disable copy option from database, i understand
prasanna> usually this option will be available only for super user,
prasanna> however we need to disable fully from DB.. please advice
Why?
Notice that the superuser has other ways to read and write files (for
example lo_import/lo_export, pg_read_file, using ALTER SYSTEM to
change the log directory and filename, loading a module to call the OS,
using file access functions in any untrusted language, etc. etc.)
--
Andrew (irc:RhodiumToad)
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Disable copy function
2018-11-30 03:46 Disable copy function prasanna rk <prasanna2mail@gmail.com>
2018-11-30 09:18 ` Re: Disable copy function Andrew Gierth <andrew@tao11.riddles.org.uk>
@ 2018-11-30 09:34 ` Ron <ronljohnsonjr@gmail.com>
2018-11-30 16:09 ` Re: Disable copy function David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 1 reply; 5+ messages in thread
From: Ron @ 2018-11-30 09:34 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
On 11/30/2018 03:18 AM, Andrew Gierth wrote:
>>>>>> "prasanna" == prasanna rk <prasanna2mail@gmail.com> writes:
> prasanna> Hi Team
> prasanna> How do I disable copy option from database, i understand
> prasanna> usually this option will be available only for super user,
> prasanna> however we need to disable fully from DB.. please advice
>
> Why?
ISTM that a lot of people on this list have never worked in large companies
run by unimaginative people who only know "Best Practice". This crazy
question smells of that: OP has been tasked with blocking COPY or coming
back with an authoritative document saying why it can't be done.
> Notice that the superuser has other ways to read and write files (for
> example lo_import/lo_export, pg_read_file, using ALTER SYSTEM to
> change the log directory and filename, loading a module to call the OS,
> using file access functions in any untrusted language, etc. etc.)
--
Angular momentum makes the world go 'round.
^ permalink raw reply [nested|flat] 5+ messages in thread
* Re: Disable copy function
2018-11-30 03:46 Disable copy function prasanna rk <prasanna2mail@gmail.com>
2018-11-30 09:18 ` Re: Disable copy function Andrew Gierth <andrew@tao11.riddles.org.uk>
2018-11-30 09:34 ` Re: Disable copy function Ron <ronljohnsonjr@gmail.com>
@ 2018-11-30 16:09 ` David G. Johnston <david.g.johnston@gmail.com>
0 siblings, 0 replies; 5+ messages in thread
From: David G. Johnston @ 2018-11-30 16:09 UTC (permalink / raw)
To: Ron <ronljohnsonjr@gmail.com>; +Cc: pgsql-admin@lists.postgresql.org
On Fri, Nov 30, 2018 at 2:34 AM Ron <ronljohnsonjr@gmail.com> wrote:
>
> On 11/30/2018 03:18 AM, Andrew Gierth wrote:
> >>>>>> "prasanna" == prasanna rk <prasanna2mail@gmail.com> writes:
> > prasanna> Hi Team
> > prasanna> How do I disable copy option from database, i understand
> > prasanna> usually this option will be available only for super user,
> > prasanna> however we need to disable fully from DB.. please advice
> >
> > Why?
>
> ISTM that a lot of people on this list have never worked in large companies
> run by unimaginative people who only know "Best Practice". This crazy
> question smells of that: OP has been tasked with blocking COPY or coming
> back with an authoritative document saying why it can't be done.
I'd probably be on board with a compile-time option to disable
filesystem access by the postgres service from within the SQL
interface...language-wise the server operator can already make them
unavailable, if sand-boxing isn't an option.
As for the whole not working in a large corporation - I'd rather not
deal with that and revert to just answering the question that was put
forth, with a nod toward the fact that indeed what is being asked is
likely too narrow to be effective (beyond a checkbox on a piece of
paper) even if accomplished.
David J.
^ permalink raw reply [nested|flat] 5+ messages in thread
end of thread, other threads:[~2018-11-30 16:09 UTC | newest]
Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2018-11-30 03:46 Disable copy function prasanna rk <prasanna2mail@gmail.com>
2018-11-30 05:04 ` David G. Johnston <david.g.johnston@gmail.com>
2018-11-30 09:18 ` Andrew Gierth <andrew@tao11.riddles.org.uk>
2018-11-30 09:34 ` Ron <ronljohnsonjr@gmail.com>
2018-11-30 16:09 ` David G. Johnston <david.g.johnston@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox