Re: Security implications of config-file-location patch

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: Security implications of config-file-location patch
Date: 2004-10-09 17:11:52
Message-ID: 28615.1097341912@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> Tom Lane wrote:
>> As of CVS tip, if you are using the config-file-location-changing
>> features, anybody can find out the data directory location via
>> "show pgdata";

> Btw., couldn't we come up with a more descriptive parameter name than
> "pgdata"?

Sure. Actually it was just bothering me that "-c pgdata" didn't mean
quite the same thing as setting PGDATA in the environment. Do you like
"data_dir" or "data_directory" for the GUC variable?

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Peter Eisentraut 2004-10-09 17:16:26 Re: Notes on config-file-locations patch
Previous Message Peter Eisentraut 2004-10-09 17:09:46 Re: SQL-Invoked Procedures for 8.1