From: Tom Lane <tgl@sss.pgh.pa.us>
To: Andres Freund <andres@anarazel.de>
cc: pgsql-hackers@lists.postgresql.org
Subject: Re: Marking some contrib modules as trusted extensions
In-reply-to: <13921.1581638230@sss.pgh.pa.us>
References: <32315.1580326876@sss.pgh.pa.us>
 <20200213233015.r6rnubcvl4egdh5r@alap3.anarazel.de>
 <13921.1581638230@sss.pgh.pa.us>
Comments: In-reply-to Tom Lane <tgl@sss.pgh.pa.us>
	message dated "Thu, 13 Feb 2020 18:57:10 -0500"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <14513.1581638958.1@sss.pgh.pa.us>
Date: Thu, 13 Feb 2020 19:09:18 -0500
Message-ID: <14514.1581638958@sss.pgh.pa.us>
Precedence: bulk

I wrote:
> Andres Freund <andres@anarazel.de> writes:
>> It seems to me that FROM UNPACKAGED shouldn't support trusted.

> Hmm, seems like a reasonable idea, but I'm not quite sure how to mechanize
> it given that "unpackaged" isn't magic in any way so far as extension.c
> is concerned.  Maybe we could decide that the time for supporting easy
> updates from pre-9.1 is past, and just remove all the unpackaged-to-XXX
> scripts?  Maybe even remove the "FROM version" option altogether.

[ thinks some more... ]  A less invasive idea would be to insist that
you be superuser to use the FROM option.  But I'm thinking that the
unpackaged-to-XXX scripts are pretty much dead letters anymore.  Has
anyone even tested them in years?  How much longer do we want to be
on the hook to fix them?

			regards, tom lane