Feedback-ID: i76984098:Fastmail
Message-ID: <e960893a-16c7-4edc-8c0f-8ea322fc1003@aklaver.com>
Date: Sat, 20 Apr 2024 09:35:29 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Logging statement having any threat?
To: Lok P <loknath.73@gmail.com>,
 pgsql-general <pgsql-general@lists.postgresql.org>
References: <CAKna9VZZuGwejSd+u9gQ7WobDYDcip+2Ua5e67sKA-Wgah=7Wg@mail.gmail.com>
Content-Language: en-US
From: Adrian Klaver <adrian.klaver@aklaver.com>
In-Reply-To: <CAKna9VZZuGwejSd+u9gQ7WobDYDcip+2Ua5e67sKA-Wgah=7Wg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: <https://www.postgresql.org/message-id/e960893a-16c7-4edc-8c0f-8ea322fc1003%40aklaver.com>
Precedence: bulk

On 4/20/24 07:02, Lok P wrote:
> 
> Now when we reach out to the infrastructure team , they are saying these 
> variables(pg_cluster_log_statement,pg_instance_log_statement) were 
> removed due to potential security threat. So I want to understand from 
> experts here , how this is really a security threat and if any option to 
> get this logging enabled (which will help us debug performance issues) 
> at same time addressing the threat too?

I should have added to previous post, if you have access to the database 
the security wall has already been breached.

> 
> Regards
> Lok

-- 
Adrian Klaver
adrian.klaver@aklaver.com