Date: Wed, 24 Jun 2020 12:50:16 -0400
From: Stephen Frost <sfrost@snowman.net>
To: Alvaro Herrera <alvherre@2ndquadrant.com>
Cc: Kyotaro Horiguchi <horikyota.ntt@gmail.com>, michael@paquier.xyz,
	andres@anarazel.de, jkatz@postgresql.org, davecramer@postgres.rocks,
	masao.fujii@oss.nttdata.com, masahiko.sawada@2ndquadrant.com,
	sitnikov.vladimir@gmail.com, pgsql-hackers@postgresql.org,
	pg@bowt.ie
Subject: Re: SIGSEGV from START_REPLICATION 0/XXXXXXX in XLogSendPhysical ()
 at walsender.c:2762
Message-ID: <20200624165016.GR3125@tamriel.snowman.net>
References: <20200624.115638.1224023045303890562.horikyota.ntt@gmail.com>
 <20200624145808.GA18120@alvherre.pgsql>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="wYXww9TlNKyqAMAe"
Content-Disposition: inline
In-Reply-To: <20200624145808.GA18120@alvherre.pgsql>
User-Agent: Mutt/1.5.24 (2015-08-30)
Precedence: bulk


--wYXww9TlNKyqAMAe
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Greetings,

* Alvaro Herrera (alvherre@2ndquadrant.com) wrote:
> On 2020-Jun-24, Kyotaro Horiguchi wrote:
>=20
> > In logical replication, a replication role is intended to be
> > accessible only to the GRANTed databases.  On the other hand the same
> > role can create a dead copy of the whole cluster, including
> > non-granted databases.
>=20
> In other words -- essentially, if you grant replication access to a role
> only to a specific database, they can steal the whole cluster.
>=20
> I don't see what's so great about that, but apparently people like it.

Sure, people who aren't in charge of security I'm sure like the ease of
use.

Doesn't mean it makes sense or that we should be supporting that.  What
we should have is a way to allow administrators to configure a system
for exactly what they want to allow, and it doesn't seem like we're
doing that today and therefore we should fix it.  This isn't the only
area we have that issue in.

Thanks,

Stephen

--wYXww9TlNKyqAMAe
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=/37M
-----END PGP SIGNATURE-----

--wYXww9TlNKyqAMAe--