Message-ID: <d735a034fb567b844fb43753d02298da8775ad17.camel@cybertec.at>
Subject: Re: [PATCH] New predefined role pg_manage_extensions
From: Laurenz Albe <laurenz.albe@cybertec.at>
To: Robert Haas <robertmhaas@gmail.com>, Jelte Fennema-Nio
 <postgres@jeltef.nl>
Cc: Michael Banck <mbanck@gmx.net>, PostgreSQL Hackers
	 <pgsql-hackers@lists.postgresql.org>
Date: Fri, 07 Mar 2025 15:33:43 +0100
In-Reply-To: 
 <CA+TgmoZw-+qLZnFSa-6PvkBVFa2iuJVTarP0EnRUgwBe-47XfA@mail.gmail.com>
References: <65a1524e.050a0220.49266.7670@mx.google.com>
	 <CAGECzQQ2HB85N9PjTAdDTpFCciQmpeE2PcXbc8EKhSF=RPi3fA@mail.gmail.com>
	 <CA+Tgmoa3OA+1T-SBDLkVqgYW1cFSjuSF=L_wh=CJM+k=P+8OAA@mail.gmail.com>
	 <CAGECzQRjkyiQ9b4vB2UDwppX4T3_SNhjYxMog4jxCSc6PEPKag@mail.gmail.com>
	 <CA+TgmoZw-+qLZnFSa-6PvkBVFa2iuJVTarP0EnRUgwBe-47XfA@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.54.3 (3.54.3-1.fc41) 
MIME-Version: 1.0
Archived-At: 
 <https://www.postgresql.org/message-id/d735a034fb567b844fb43753d02298da8775ad17.camel%40cybertec.at>
Precedence: bulk

On Fri, 2025-03-07 at 09:17 -0500, Robert Haas wrote:
> On Fri, Mar 7, 2025 at 9:02=E2=80=AFAM Jelte Fennema-Nio <postgres@jeltef=
.nl> wrote:
> > The reason why I walked back my comment was that cloud providers can
> > simply choose which extensions they actually add to the image. If an
> > extension is marked as not trusted by the author, then with this role
> > they can still choose to add it without having to make changes to the
> > control file if they think it's "secure enough".
>=20
> Hmm. It would be easy to do dumb things here, but I agree there are
> probably a bunch of debatable cases. Maybe it would be smart if we
> labelled our untrusted extensions somehow with why they're untrusted,
> or documented that.
>=20
> Why wouldn't the cloud provider just change add 'trusted =3D true' to
> the relevant control files instead of doing this?

That's quite true.  Perhaps the patch should be rejected after all.

Yours,
Laurenz Albe