Feedback-ID: i131946ab:Fastmail
Message-ID: <849661f1-85a3-2833-5477-059a9b58e70f@enterprisedb.com>
Date: Fri, 27 May 2022 14:03:21 +0200
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0)
 Gecko/20100101 Thunderbird/91.9.0
Subject: Re: allow building trusted languages without the untrusted versions
Content-Language: en-US
To: Nathan Bossart <nathandbossart@gmail.com>,
 Robert Haas <robertmhaas@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>,
 "pgsql-hackers@postgresql.org" <pgsql-hackers@postgresql.org>
References: <571753.1653092411@sss.pgh.pa.us>
 <20220523165403.GC938919@nathanxps13> <1290329.1653326228@sss.pgh.pa.us>
 <CA+TgmoY-Xy_ObfYVUTSamD8BmW8npaktbr65JtnkW-c1VQobVA@mail.gmail.com>
 <1333860.1653338790@sss.pgh.pa.us>
 <CA+TgmoYZKLxftaZZvj4_-zHQ27CBeUs+KvggyU3qS79-7aQEPA@mail.gmail.com>
 <1354561.1653345768@sss.pgh.pa.us>
 <CA+TgmoZ_c0j4ut87_QCFm697Qq5Z_u66VZt2PYenfZVjUT1qRA@mail.gmail.com>
 <20220524172851.GA1191690@nathanxps13>
 <CA+TgmobOQiDXpYq6TgaCzH3p5c0Fko-wXqCjgd5YsR6RsX31vA@mail.gmail.com>
 <20220524205841.GA1254661@nathanxps13>
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
In-Reply-To: <20220524205841.GA1254661@nathanxps13>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Archived-At: 
 <https://www.postgresql.org/message-id/849661f1-85a3-2833-5477-059a9b58e70f%40enterprisedb.com>
Precedence: bulk

On 24.05.22 22:58, Nathan Bossart wrote:
> FWIW this was my original thinking.  I can choose to build/install
> extensions separately, but when it comes to PL/Tcl and PL/Perl, you've
> got to build the trusted and untrusted stuff at the same time, and the
> untrusted symbols remain even if you remove the control file and
> installation scripts.  Of course, this isn't a complete solution for
> removing the ability to do any sort of random file system access, though.

This only makes sense to me if you install directly from the source tree 
to your production installation.  Presumably, there is usually a 
packaging step in between.  And you can decide at that point which files 
to install or not to install.