Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tK0xF-006LKY-QV for pgsql-general@arkaria.postgresql.org; Sat, 07 Dec 2024 19:59:05 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tK0xD-00GkwQ-BN for pgsql-general@arkaria.postgresql.org; Sat, 07 Dec 2024 19:59:04 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tK0xC-00GkwI-Vp for pgsql-general@lists.postgresql.org; Sat, 07 Dec 2024 19:59:04 +0000 Received: from mail-ot1-x331.google.com ([2607:f8b0:4864:20::331]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1tK0xB-001YdE-F6 for pgsql-general@postgresql.org; Sat, 07 Dec 2024 19:59:03 +0000 Received: by mail-ot1-x331.google.com with SMTP id 46e09a7af769-71de334f141so74484a34.0 for ; Sat, 07 Dec 2024 11:59:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1733601540; x=1734206340; darn=postgresql.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=OxfBBtKuf+eZEUQRe+vPOMNw3OCVSPBHbd/C4yXfUZQ=; b=H65Vl7n5qnM+hqmiBYNMrfJGnV1ktlhwF/sPWFRfNs6MV2Gh1ZCoqfRBpbsrO6dZyh zN+kKN2IbWUPJeFi5CPed6WRVk+alHLWqOJcXMJ67FiSyVN5ej1kjlkhQLpfHBgc0L/B h4hloAPv2+gEwkM4CScASOGSVniGyW1huAjZJkzFT+nnfh7lkVvE5SLb2m9f4O9pGBw6 s/AZ8+wj6xQ19id9rbGe2B2Gj1yeIDBwhh0fereKwhqtK9gXgkav9/tUGB5/MFSwnpf7 VO48lWMfU8At29rTLFvz1TVhTBEvbhQKevLR1jTbXpHF/APyotAAi3iTtmXw+Rah1HGP Z63g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1733601540; x=1734206340; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=OxfBBtKuf+eZEUQRe+vPOMNw3OCVSPBHbd/C4yXfUZQ=; b=BJA/FQcV3xPWpRxyZRwgu5TndaeUUV5WPrBQ3zktrGARMOBmR2u9rn9HneDliDP0O+ SdNLPE2oVW6ZNRIJ/yqUVEopbbZkwa0b5v1NwBYMUbQGaH8mpLDNcLqMmRIWHQ5oA1zQ NuG+pnOlRo5atJnDtPMzBEWuDNZsm46jn+4NmmV8stBDLMXKLx01cdGwP39qiA6nmyXp FfF2OTVAtrN8V0V4emmzMQMFUdwuHEBwQjLIZJ9VAbumZiCwwpydpDJlireHWT9sKwtM 8gFxOL+hivFw+AOXgjEnlVlbfzbXKau5kgds07JvkkngNVDPEBcQIZHTo0MdtfBwvBUl urYg== X-Forwarded-Encrypted: i=1; AJvYcCXK8FExJOpDI37gcCTi4rx6TQDO0R7Jm3JdmOGH7aueqbZH5lHWVc2sdZHEM4+8S91oIgNMoBJzR7kLl9RB@postgresql.org X-Gm-Message-State: AOJu0Yzu97js6QPlrRyKo/eyLM95JrrkP7QjqTW7jz+9GIXJu+B9J/Mf fjonatsHuCajsLZBpodjghLr5w68lOAzDs51JLlLGpCn+7pJsPEBPApUtpxxBj9uW05yr4S/JMu n6isNhd4Tbeegy4Z1vE39WcYNLuE= X-Gm-Gg: ASbGnctk7ab3dM5zujBhGNaljI51jpKsHP2eHqHWTIr3uPnpjdhBIBKUaDSkHIYkiEz 8+ilOgtcqotYP+gQMHKDi1HYKE87X6q0= X-Google-Smtp-Source: AGHT+IF0Yr0HaUWlEog6fQrciMA1vZBYxJFo+ZU0ZRhCjl4x9ZvSGC+xxf9hz08hfPVEmJ5jhd+ti3HRHWYhY60jWbc= X-Received: by 2002:a05:6830:600c:b0:71d:46c8:60cf with SMTP id 46e09a7af769-71dcf512d93mr3806227a34.12.1733601540250; Sat, 07 Dec 2024 11:59:00 -0800 (PST) MIME-Version: 1.0 References: <6a6439f1-8039-44e2-8fb9-59028f7f2014@mailbox.org> <9c5ba566-27b8-4e8c-bf7d-2dc561509991@mailbox.org> <41791b6d-aaf5-4fed-9cc3-e89bc49e8637@mailbox.org> <1257068.1733025493@sss.pgh.pa.us> <06425038-e012-4bac-aec1-d9541436f893@mailbox.org> <92405f98-7f0c-4442-8252-697352daefc1@aklaver.com> <1470486.1733087658@sss.pgh.pa.us> <4ab662d8-57cc-471f-8a58-cfd71d1cea22@aklaver.com> <1475512.1733090108@sss.pgh.pa.us> <19d5f2c7-1252-4442-accb-8aa2cb289ad0@mailbox.org> In-Reply-To: From: "David G. Johnston" Date: Sat, 7 Dec 2024 12:58:23 -0700 Message-ID: Subject: Re: Errors when restoring backup created by pg_dumpall To: PopeRigby Cc: Adrian Klaver , Tom Lane , "pgsql-general@postgresql.org" Content-Type: multipart/alternative; boundary="000000000000fd23f20628b38fee" List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --000000000000fd23f20628b38fee Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Dec 7, 2024 at 12:25=E2=80=AFPM PopeRigby w= rote: > > It actually looks like setting those all to have public fixed all the > errors, including the one with lldap. So, how can I get it to not put > public there automatically for next time? > > I assume you mean "get it to put public there" (i.e., the "not" is a typo) You cannot. The security team has decided to not permit an opt-in bypass of the lock-downs implemented to fix CVE-2018-1058. Your only real choice at the moment is to replace the function call in the generated expression with a custom function and in that custom function's create function command attach a "set search_path to public" clause. That will prevent inlining and also ensure the public schema is in the search_path when executing the public.ll_to_earth function call. With that in place the empty search_path in the dump file will no longer matter. David J. --000000000000fd23f20628b38fee Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Sat, Dec 7, 2024 at 12:25=E2=80=AFPM PopeRigby <poperigby@mailbox.org> wrote:

It actually looks like setting those all to have public fixed all the
errors, including the one with lldap. So, how can I get it to not put
public there automatically for next time?


I assume you mean "get it to put pu= blic there" (i.e., the "not" is a typo)

You cannot.=C2=A0 The security team has decided to not permit an opt-in by= pass of the lock-downs implemented to fix CVE-2018-1058.

=
Your only real choice at the moment is to replace the function call in t= he generated expression with a custom function and in that custom function&= #39;s create function command attach a "set search_path to public"= ; clause.=C2=A0 That will prevent inlining and also ensure the public schem= a is in the search_path when executing the public.ll_to_earth function call= .=C2=A0 With that in place the empty search_path in the dump file will no l= onger matter.

David J.

--000000000000fd23f20628b38fee--