Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1csv4C-0003oW-Fm for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Mar 2017 17:38:00 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1csv4C-0007ec-2R for pgsql-hackers@arkaria.postgresql.org; Tue, 28 Mar 2017 17:38:00 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1csv4B-0007cG-5a for pgsql-hackers@postgresql.org; Tue, 28 Mar 2017 17:37:59 +0000 Received: from tamriel.snowman.net ([72.66.115.51]) by magus.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1csv46-0002Am-T5 for pgsql-hackers@postgresql.org; Tue, 28 Mar 2017 17:37:58 +0000 Received: by tamriel.snowman.net (Postfix, from userid 1000) id CE3855F796; Tue, 28 Mar 2017 13:37:21 -0400 (EDT) Date: Tue, 28 Mar 2017 13:37:21 -0400 From: Stephen Frost To: Robert Haas Cc: Dave Page , Mark Dilger , Peter Eisentraut , PostgreSQL Hackers Subject: Re: Monitoring roles patch Message-ID: <20170328173721.GF9812@tamriel.snowman.net> References: <20170322131510.GC9812@tamriel.snowman.net> <20170323122335.GK9812@tamriel.snowman.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="0Kl4NH/NLmzfQbYE" Content-Disposition: inline In-Reply-To: X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/3.13.0-91-generic (x86_64) X-Uptime: 13:36:58 up 262 days, 19:01, 23 users, load average: 0.21, 0.15, 0.14 User-Agent: Mutt/1.5.21 (2010-09-15) X-Pg-Spam-Score: -1.9 (-) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org --0Kl4NH/NLmzfQbYE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Greetings, * Robert Haas (robertmhaas@gmail.com) wrote: > On Tue, Mar 28, 2017 at 12:47 PM, Dave Page wrote: > >> I don't see any precedent in the code for having a hardcoded role, oth= er than > >> superuser, and allowing privileges based on a hardcoded test for membe= rship > >> in that role. I'm struggling to think of all the security implication= s of that. > > > > This would be the first. >=20 > Isn't pg_signal_backend an existing precedent? Yes, it is. Thanks! Stephen --0Kl4NH/NLmzfQbYE Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJY2p9RAAoJEO1sijiDR2RVZTUP/0q6zS2Vl6OJyp+O9O63Ct/9 qNQZ2L6exmavbk6kbqIBgSz5Z4656pI1B9gdlUo8CSrzx2ZUoiu2vX4xFlPHssvB IUaDGT7Gy6DBZDgJSQHZjkKNvzMwZaXnrjC/NctEdbSvQojqWVGdmuEHLIKBkd61 BVJsBvyFBPSZcEAkpfAYrh3voUKP0zRdgnLQVgR3SdSLexN49oPuwSMlBGaxvTsI xw/w8d4KnAszTLYlmBxGui4TGGl+XIGk+ERM7LnJ8Bk8cqE18zHSuPgcP1aywzoY VA1upEKsEGhXUBSc9nXg/EpTXLCYNidfpmMCqGRLrEkf3+9mj4ATIBMCgZ78yxwg zmKa0kQCLe8ggcLg86pQG/cNoJrd3wfi0D8S27r9nU+qgWKo7YiwwW8lHwGgpg59 zohM4zkJ16m5htl37uJcQSP78Ut8RSIKGYlhrylieMZVxZ6JI9FBqHosRa41zfKC hxNG8N+CdRvqgKGaWp3KzniteU/pWD/LqLfiWUGbOsSpiYVGSGnYBLIpTRZY56ri Js9C5M1fyzIho8MtLJwqIDzXI8Frj+e4t7jzjaypi2pf+hEm3s2mpEv0AVxqBAiL HeJRtUru+/EpC1hgoyxSq2LSSBZLibkzCcrkacWP6ziXvU5t5XN9oEPu8I7Kwlq8 H3ILDI3Yhm+c3hisOLGq =qgdP -----END PGP SIGNATURE----- --0Kl4NH/NLmzfQbYE--