Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l15nA-0002nZ-TX for pgsql-hackers@arkaria.postgresql.org; Sun, 17 Jan 2021 11:00:20 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.92) (envelope-from ) id 1l15n9-0004IP-CQ for pgsql-hackers@arkaria.postgresql.org; Sun, 17 Jan 2021 11:00:19 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l15n9-0004IH-4z for pgsql-hackers@lists.postgresql.org; Sun, 17 Jan 2021 11:00:19 +0000 Received: from relay2-d.mail.gandi.net ([217.70.183.194]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1l15n2-0003PB-45 for pgsql-hackers@postgresql.org; Sun, 17 Jan 2021 11:00:18 +0000 X-Originating-IP: 79.88.149.14 Received: from [172.16.255.146] (14.149.88.79.rev.sfr.net [79.88.149.14]) (Authenticated sender: vik@postgresfriends.org) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id 9A16640004; Sun, 17 Jan 2021 11:00:07 +0000 (UTC) Subject: Re: Dump public schema ownership & seclabels To: Noah Misch Cc: pgsql-hackers@postgresql.org References: <20201229134924.GA1431748@rfd.leadboat.com> <20201230115902.GB1431748@rfd.leadboat.com> <20210117094102.GB1695558@rfd.leadboat.com> From: Vik Fearing Message-ID: <50ebd5f1-4d61-cfda-bb19-dc41fc7dae60@postgresfriends.org> Date: Sun, 17 Jan 2021 12:00:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <20210117094102.GB1695558@rfd.leadboat.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk On 1/17/21 10:41 AM, Noah Misch wrote: > On Sat, Jan 16, 2021 at 02:05:43PM +0100, Vik Fearing wrote: >> On 12/30/20 12:59 PM, Noah Misch wrote: >>> On Tue, Dec 29, 2020 at 05:49:24AM -0800, Noah Misch wrote: >>>> https://postgr.es/m/20201031163518.GB4039133@rfd.leadboat.com gave $SUBJECT as >>>> one of the constituent projects for changing the public schema default ACL. >>>> This ended up being simple. Attached. >>> >>> This is defective; it fails to reproduce nspacl after "ALTER SCHEMA public >>> OWNER TO pg_write_server_files; REVOKE ALL ON SCHEMA public FROM >>> pg_write_server_files;". I will try again later. >> >> Could I ask you to also include COMMENTs when you try again, please? > > That may work. I had not expected to hear of a person changing the comment on > schema public. To what do you change it? It was a while ago and I don't remember because it didn't appear in the dump so I stopped doing it. :( Mine was an actual comment, but there are some tools out there that (ab)use COMMENTs as crude metadata for what they do. For example: https://postgresql-anonymizer.readthedocs.io/en/stable/declare_masking_rules/#declaring-rules-with-comments -- Vik Fearing