From: Alvaro Herrera <alvherre@2ndquadrant.com>
To: Kyotaro Horiguchi <horikyota.ntt@gmail.com>
Cc: michael@paquier.xyz
Cc: andres@anarazel.de
Cc: jkatz@postgresql.org
Cc: davecramer@postgres.rocks
Cc: masao.fujii@oss.nttdata.com
Cc: masahiko.sawada@2ndquadrant.com
Cc: sitnikov.vladimir@gmail.com
Cc: pgsql-hackers@postgresql.org
Cc: pg@bowt.ie
Subject: Re: SIGSEGV from START_REPLICATION 0/XXXXXXX in XLogSendPhysical () at walsender.c:2762
Date: Wed, 24 Jun 2020 10:58:08 -0400
Message-ID: <20200624145808.GA18120@alvherre.pgsql> (raw)
In-Reply-To: <20200624.115638.1224023045303890562.horikyota.ntt@gmail.com>
On 2020-Jun-24, Kyotaro Horiguchi wrote:
> In logical replication, a replication role is intended to be
> accessible only to the GRANTed databases. On the other hand the same
> role can create a dead copy of the whole cluster, including
> non-granted databases.
In other words -- essentially, if you grant replication access to a role
only to a specific database, they can steal the whole cluster.
I don't see what's so great about that, but apparently people like it.
--
Álvaro Herrera https://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: alvherre@2ndquadrant.com, horikyota.ntt@gmail.com, michael@paquier.xyz, andres@anarazel.de, jkatz@postgresql.org, davecramer@postgres.rocks, masao.fujii@oss.nttdata.com, masahiko.sawada@2ndquadrant.com, sitnikov.vladimir@gmail.com, pg@bowt.ie
Subject: Re: SIGSEGV from START_REPLICATION 0/XXXXXXX in XLogSendPhysical () at walsender.c:2762
In-Reply-To: <20200624145808.GA18120@alvherre.pgsql>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox