Re: Patch for - Allow server logs to be remotely read

Tom Lane wrote:
> Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> > Is that wrong? Yes. Looking at the C file, I see what you mean. Let
> > me update the README.adminpack file. read_file is already in the
> > backend code, and was in 8.1.X too.
>
> I wonder if we should take pg_read_file (and the rest of genfile.c)
> back out of the backend and stick them into contrib/adminpack. The
> argument for having them in the backend was always pretty weak to me.
> In particular, a DBA who doesn't want them in his system for security
> reasons has no simple way to get rid of them if they're in core, but
> not installing a contrib module is easy enough.

I thought about that but what we have in the backend now is read-only
which basically could be done using COPY, so I don't see any security
value to moving them out. They are super-user only just like COPY.

--
Bruce Momjian http://candle.pha.pa.us
EnterpriseDB http://www.enterprisedb.com

+ If your life is a hard drive, Christ can be your backup. +