Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1smxMz-0004N9-Lp
	for pgsql-bugs@arkaria.postgresql.org; Sat, 07 Sep 2024 15:29:02 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.94.2)
	(envelope-from <pgsql-bugs-owner+archive@lists.postgresql.org>)
	id 1smxMz-000Hi2-9V
	for pgsql-bugs@arkaria.postgresql.org; Sat, 07 Sep 2024 15:29:01 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1smxMz-000Hht-0T
	for pgsql-bugs@lists.postgresql.org; Sat, 07 Sep 2024 15:29:01 +0000
Received: from sss.pgh.pa.us ([68.162.161.243])
	by makus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1smxMw-0000U1-AQ
	for pgsql-bugs@lists.postgresql.org; Sat, 07 Sep 2024 15:28:59 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 487FSsvG2503010;
	Sat, 7 Sep 2024 11:28:54 -0400
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Joe Conway <mail@joeconway.com>
cc: Christophe Pettus <xof@thebuild.com>, Basha <Basha@maxcontact.com>,
        PostgreSQL Bug List <pgsql-bugs@lists.postgresql.org>
Subject: Re: [EXT]: Re: BUG #18604: Regression in PostgreSQL 16.4: pg_dump
 Prevents Essential System Table Modifications
In-reply-to: <172a934d-6a5d-4c57-9935-43862025b842@joeconway.com>
References: <18604-04d64b68e981ced6@postgresql.org>
 <3B462E2E-88B6-43B9-943F-90E883D33357@thebuild.com>
 <GV1P194MB2356E0520E83B40CE57D4D2FD89E2@GV1P194MB2356.EURP194.PROD.OUTLOOK.COM>
 <183A6734-06B2-48E9-A5C9-235EF87B0DFB@thebuild.com>
 <GV1P194MB235610E122081099FBC480ECD89E2@GV1P194MB2356.EURP194.PROD.OUTLOOK.COM>
 <6860E1BC-DA5A-4576-9FB6-35ED31E6F017@thebuild.com>
 <GV1P194MB2356082D55A66B1F659F1AA5D89F2@GV1P194MB2356.EURP194.PROD.OUTLOOK.COM>
 <73AD2F56-1009-49C7-8752-39C45325A9BB@thebuild.com>
 <GV1P194MB2356E46170B9C91E45E6987FD89F2@GV1P194MB2356.EURP194.PROD.OUTLOOK.COM>
 <01CF2C94-D153-4687-B2EF-EF4B4B1890DF@thebuild.com>
 <2410942.1725675471@sss.pgh.pa.us>
 <8D1E6C08-1C4B-4056-846F-C33C0056249E@thebuild.com>
 <172a934d-6a5d-4c57-9935-43862025b842@joeconway.com>
Comments: In-reply-to Joe Conway <mail@joeconway.com>
	message dated "Sat, 07 Sep 2024 10:09:47 -0400"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <2503008.1725722934.1@sss.pgh.pa.us>
Date: Sat, 07 Sep 2024 11:28:54 -0400
Message-ID: <2503009.1725722934@sss.pgh.pa.us>
List-Id: <pgsql-bugs.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-bugs@lists.postgresql.org>
List-Owner: <mailto:pgsql-bugs-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-bugs>
Archived-At: 
 <https://www.postgresql.org/message-id/2503009.1725722934%40sss.pgh.pa.us>
Precedence: bulk

Joe Conway <mail@joeconway.com> writes:
> I think Tom's suggestion regarding RLS on system catalogs was one 
> approach bandied about in the past, but unless I am mistaken we never 
> committed the patch to allow RLS on system catalogs (or did I miss that?)

I experimented before proposing that, and we will let you create
RLS policies on system catalogs (if allow_system_table_mods = on).
Of course the system itself will ignore those, but I don't see
why they would not work for user-issued queries.

			regards, tom lane