Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nufhX-0005Wa-Nb for pgsql-bugs@arkaria.postgresql.org; Fri, 27 May 2022 19:32:47 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1nufhW-0006JV-KS for pgsql-bugs@arkaria.postgresql.org; Fri, 27 May 2022 19:32:46 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nufhW-0006JL-CO for pgsql-bugs@lists.postgresql.org; Fri, 27 May 2022 19:32:46 +0000 Received: from sss.pgh.pa.us ([66.207.139.130]) by makus.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nufhQ-0008QH-4D for pgsql-bugs@lists.postgresql.org; Fri, 27 May 2022 19:32:45 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 24RJWbn12722435; Fri, 27 May 2022 15:32:37 -0400 From: Tom Lane To: Robert Haas cc: Noah Misch , =?UTF-8?B?RsOkcmJlciwgRnJhbnotSm9zZWYgKFN0TVVLKQ==?= , PostgreSQL mailing lists Subject: Re: Extension pg_trgm, permissions and pg_dump order In-reply-to: References: <1961551.1653498155@sss.pgh.pa.us> <20220526055047.GA3153526@rfd.leadboat.com> <2703829.1653677615@sss.pgh.pa.us> Comments: In-reply-to Robert Haas message dated "Fri, 27 May 2022 15:29:07 -0400" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <2722433.1653679957.1@sss.pgh.pa.us> Date: Fri, 27 May 2022 15:32:37 -0400 Message-ID: <2722434.1653679957@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Robert Haas writes: > On Fri, May 27, 2022 at 2:53 PM Tom Lane wrote: >> From the security perspective it may be just fine. Nonetheless, >> we need to un-break pg_dump; it's not optional for that to work. > That's pretty obvious. What's not obvious - at least to me - is > whether the kinds of changes that Noah is proposing to make here have > the effect of putting back the security vulnerability that the > original commit was intended to fix. Yeah, that is the problematic part of this. I'm not sure about that either, and we'll need to look at it closely. regards, tom lane