Received: from localhost (unknown [200.46.204.183]) by postgresql.org (Postfix) with ESMTP id 6A21B650330 for ; Thu, 31 Jul 2008 18:23:24 -0300 (ADT) Received: from postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 15918-01-4 for ; Thu, 31 Jul 2008 18:23:17 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by postgresql.org (Postfix) with ESMTP id 31D2D650228 for ; Thu, 31 Jul 2008 18:23:21 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id m6VLNE6i023847; Thu, 31 Jul 2008 17:23:14 -0400 (EDT) To: Kris Jurka cc: Alvaro Herrera , pgsql-hackers@postgreSQL.org, pljava-dev@pgfoundry.org Subject: Re: Should creating a new base type require superuser status? In-reply-to: References: <19715.1217447413@sss.pgh.pa.us> <20080730220753.GG3977@alvh.no-ip.org> Comments: In-reply-to Kris Jurka message dated "Thu, 31 Jul 2008 15:45:13 -0400" Date: Thu, 31 Jul 2008 17:23:14 -0400 Message-ID: <23846.1217539394@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=0 tagged_above=0 required=5 tests=none X-Spam-Level: X-Archive-Number: 200807/1491 X-Sequence-Number: 121751 Kris Jurka writes: > On Wed, 30 Jul 2008, Alvaro Herrera wrote: >> I do agree that creating base types should require a superuser though. >> It too seems dangerous just on principle, even if today there's no >> actual hole (that we already know of). > pl/java already allows non-superusers to create functions returning > cstring and base types built off of these functions. So in other words, if pl/java is installed we have a security hole a mile wide. regards, tom lane