From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Pavel Stehule <pavel.stehule@gmail.com>
Cc: Tomas Vondra <tomas.vondra@2ndquadrant.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Providing catalog view to pg_hba.conf file - Patch submission
Date: Fri, 27 Feb 2015 21:06:41 -0500
Message-ID: <20150228020641.GX29780@tamriel.snowman.net> (raw)
In-Reply-To: <29710.1425087618@sss.pgh.pa.us>
References: <54C95C4B.2080901@BlueTreble.com>
<54F09D68.2090700@2ndquadrant.com>
<20150227165950.GP29780@tamriel.snowman.net>
<CAFj8pRBo6n4gEQV8J72R0_iXiCa-kZ+j1Ecwk+LrjZRJFN4PhQ@mail.gmail.com>
<20150227183236.GQ29780@tamriel.snowman.net>
<CAFj8pRD0GmDAf-4M8U=JyuDRUn5n1W3HCbL2oaKDbasLKwU4zw@mail.gmail.com>
<20150227195529.GS29780@tamriel.snowman.net>
<12545.1425072391@sss.pgh.pa.us>
<20150228003749.GU29780@tamriel.snowman.net>
<29710.1425087618@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Stephen Frost <sfrost@snowman.net> writes:
> > I understand that there may be objections to that on the basis that it's
> > work that's (other than for this case) basically useless,
>
> Got it in one.
Meh. It's hardly all that difficult and it's not useless if the user
wants to look at it.
> I'm also not terribly happy about leaving security-relevant data sitting
> around in backend memory 100% of the time. We have had bugs that exposed
> backend memory contents for reading without also granting the ability to
> execute arbitrary code, so I think doing this does represent a
> quantifiable decrease in the security of pg_hba.conf.
How is that any different from today? The only time it's not *already*
in backend memory is when the user has happened to go through and make a
change and used reload (instead of restart) and then it's not so much
that the security sensetive information isn't there, it's just out of
date.
I'm not entirely against the idea of changing how things are today, but
this argument simply doesn't apply to the current state of things.
Thanks!
Stephen
Attachments:
[application/pgp-signature] signature.asc (818B, ../20150228020641.GX29780@tamriel.snowman.net/2-signature.asc)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net, tgl@sss.pgh.pa.us, pavel.stehule@gmail.com, tomas.vondra@2ndquadrant.com
Subject: Re: Providing catalog view to pg_hba.conf file - Patch submission
In-Reply-To: <20150228020641.GX29780@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox