pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
To: Nathan Bossart <nathandbossart@gmail.com>
To: Robert Haas <robertmhaas@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-hackers@postgresql.org <pgsql-hackers@postgresql.org>
Subject: Re: allow building trusted languages without the untrusted versions
Date: Fri, 27 May 2022 14:03:21 +0200
Message-ID: <849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com> (raw)
In-Reply-To: <20220524205841.GA1254661@nathanxps13>
References: <571753.1653092411@sss.pgh.pa.us>
	<20220523165403.GC938919@nathanxps13>
	<1290329.1653326228@sss.pgh.pa.us>
	<CA+TgmoY-Xy_ObfYVUTSamD8BmW8npaktbr65JtnkW-c1VQobVA@mail.gmail.com>
	<1333860.1653338790@sss.pgh.pa.us>
	<CA+TgmoYZKLxftaZZvj4_-zHQ27CBeUs+KvggyU3qS79-7aQEPA@mail.gmail.com>
	<1354561.1653345768@sss.pgh.pa.us>
	<CA+TgmoZ_c0j4ut87_QCFm697Qq5Z_u66VZt2PYenfZVjUT1qRA@mail.gmail.com>
	<20220524172851.GA1191690@nathanxps13>
	<CA+TgmobOQiDXpYq6TgaCzH3p5c0Fko-wXqCjgd5YsR6RsX31vA@mail.gmail.com>
	<20220524205841.GA1254661@nathanxps13>

On 24.05.22 22:58, Nathan Bossart wrote:
> FWIW this was my original thinking.  I can choose to build/install
> extensions separately, but when it comes to PL/Tcl and PL/Perl, you've
> got to build the trusted and untrusted stuff at the same time, and the
> untrusted symbols remain even if you remove the control file and
> installation scripts.  Of course, this isn't a complete solution for
> removing the ability to do any sort of random file system access, though.

This only makes sense to me if you install directly from the source tree 
to your production installation.  Presumably, there is usually a 
packaging step in between.  And you can decide at that point which files 
to install or not to install.





view thread (35+ messages)  latest in thread

Message-ID: <849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com>
Permalink:  ../849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com/
Also on:    postgresql.org/message-id/849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: peter.eisentraut@enterprisedb.com, nathandbossart@gmail.com, robertmhaas@gmail.com, tgl@sss.pgh.pa.us
  Subject: Re: allow building trusted languages without the untrusted versions
  In-Reply-To: <849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox