From: Tom Lane <tgl@sss.pgh.pa.us>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Noah Misch <noah@leadboat.com>
Cc: Färber, Franz-Josef (StMUK) <Franz-Josef.Faerber@stmuk.bayern.de>
Cc: PostgreSQL mailing lists <pgsql-bugs@lists.postgresql.org>
Subject: Re: Extension pg_trgm, permissions and pg_dump order
Date: Fri, 27 May 2022 15:32:37 -0400
Message-ID: <2722434.1653679957@sss.pgh.pa.us> (raw)
In-Reply-To: <CA+TgmoZ9BfWUTvfrcRa4jCGS9ca7XWhYNHPzwfojAu6n6st+Dg@mail.gmail.com>
References: <f8a4105f076544c180a87ef0c4822352@stmuk.bayern.de>
<1961551.1653498155@sss.pgh.pa.us>
<20220526055047.GA3153526@rfd.leadboat.com>
<CA+TgmobJ31pKFAKJwq2p=4gKo_HYvYnnwJE7fz+T1auJfN+jEQ@mail.gmail.com>
<2703829.1653677615@sss.pgh.pa.us>
<CA+TgmoZ9BfWUTvfrcRa4jCGS9ca7XWhYNHPzwfojAu6n6st+Dg@mail.gmail.com>
Robert Haas <robertmhaas@gmail.com> writes:
> On Fri, May 27, 2022 at 2:53 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> From the security perspective it may be just fine. Nonetheless,
>> we need to un-break pg_dump; it's not optional for that to work.
> That's pretty obvious. What's not obvious - at least to me - is
> whether the kinds of changes that Noah is proposing to make here have
> the effect of putting back the security vulnerability that the
> original commit was intended to fix.
Yeah, that is the problematic part of this. I'm not sure about that
either, and we'll need to look at it closely.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, robertmhaas@gmail.com, noah@leadboat.com, Franz-Josef.Faerber@stmuk.bayern.de, pgsql-bugs@lists.postgresql.org
Subject: Re: Extension pg_trgm, permissions and pg_dump order
In-Reply-To: <2722434.1653679957@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox