Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q99vk-0007HC-PM for pgsql-committers@arkaria.postgresql.org; Tue, 13 Jun 2023 19:43:52 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1q99vi-0006cw-Vz for pgsql-committers@arkaria.postgresql.org; Tue, 13 Jun 2023 19:43:50 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q99vi-0006at-Om for pgsql-committers@lists.postgresql.org; Tue, 13 Jun 2023 19:43:50 +0000 Received: from mail-oi1-x22a.google.com ([2607:f8b0:4864:20::22a]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1q99vb-0021d2-HR for pgsql-committers@lists.postgresql.org; Tue, 13 Jun 2023 19:43:49 +0000 Received: by mail-oi1-x22a.google.com with SMTP id 5614622812f47-39c7f5706f0so3694328b6e.3 for ; Tue, 13 Jun 2023 12:43:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=j-davis-com.20221208.gappssmtp.com; s=20221208; t=1686685423; x=1689277423; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=VMUtvVu0JGZL95bMEhe5DfIYecp680jbHXNQ2f3ItfA=; b=iIdZP91qiRV2SQJRWD1MI1Xc1EK1NAHSuf1UORztZ0806zGR5kDjYzeI6TkID8j6il IOEkTQcPbbI4WMkotpzLFIbfDtIDjFDtGKyVaZS83YjUOxn2k609uNH7syAI/KVMUSLg BacL9/2YTMpECIbi3xre6/HfINQkqDxO0p/SRP3aAmKSLu1C0jQfSezqHRFognc2AlZU 8yvGISc3eH8Z1J4DD9Pa83ml5tuAWD+UM3MDbeW+gzARDXg+17tnhBndaLhF6eOEG0Dy vKxTNVemOIYlTN+cIHVD1MNr7y4+A0B/0/EvcsjYl8IxAsFPyhSSwRldhPTMiiL81EoT OyAQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1686685423; x=1689277423; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=VMUtvVu0JGZL95bMEhe5DfIYecp680jbHXNQ2f3ItfA=; b=Fk20jgrko5OcpLy5HxkVYgTMZpqTH8QvXQN1oVLhLi8T9btRIyMqXwJ6vTPDKwnyUC 6UJXAgXPjJpau3Sn/NzvIgZ1XLgL7zjfOGJJVBpf+Jo4erbOxZ3gVZLx6QhPl1LFAi30 dNJcfX0qVuvFxXnfBfcLkyKHFqoXf/CQgIcSGfdPS2M/CKRyrDQmsgSBku4APL3se/ze 3yDKgrjOMKdLe0gz82/N9loYW/prq9QNYULbw2jTQYWUHKOQkU+y0e6I/kbqD4psaYsc aJ0MrFsMGNouud+MzYxqqHZDD1cON1RS0YTH8AOthAMa7ZM7te4rDznPsfRy3JUM6+/C q9lQ== X-Gm-Message-State: AC+VfDw2BunLYT4BKb6We7nrjDkZvMkphLsBDwPGfU1SzuCxzNw1DgvK h+5l0jVimM0uf1q5WWOv2XtVHQ== X-Google-Smtp-Source: ACHHUZ6P2n27TWraDyXQVjIW1/tpaPcZSEWezxOlctgl6dsOl/o0jrjkMhurcdhc+ZNssham4Y/rHQ== X-Received: by 2002:a05:6808:1a0e:b0:39a:45e6:5953 with SMTP id bk14-20020a0568081a0e00b0039a45e65953mr9575605oib.14.1686685422993; Tue, 13 Jun 2023 12:43:42 -0700 (PDT) Received: from [172.24.1.9] ([12.126.244.130]) by smtp.gmail.com with ESMTPSA id gq20-20020a17090b105400b0024de3dff70esm4814338pjb.56.2023.06.13.12.43.41 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 13 Jun 2023 12:43:42 -0700 (PDT) Message-ID: <517b6ec059b80cbac859cecc111f9ab9061437e7.camel@j-davis.com> Subject: Re: pgsql: Fix search_path to a safe value during maintenance operations. From: Jeff Davis To: Robert Haas Cc: Noah Misch , Tom Lane , Jeff Davis , pgsql-committers@lists.postgresql.org Date: Tue, 13 Jun 2023 12:43:41 -0700 In-Reply-To: References: <89a415b86d5421941e4281ba5bf6288934078624.camel@j-davis.com> <573014.1686375211@sss.pgh.pa.us> <20230612170510.GA201972@gust.leadboat.com> <2985f969b292258ca007e9916839e2d07359ec15.camel@j-davis.com> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4-0ubuntu1 MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, 2023-06-13 at 11:24 -0400, Robert Haas wrote: > Interesting. The issue of "what is a safe search path?" is more > nuanced than I would prefer. :-( As far as I can tell, search_path was designed as a convenience for interactive queries, where a lot of these nuances make sense. But they don't make sense as defaults for code inside functions, in my opinion. Regards, Jeff Davis