Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: Lincoln Yeoh <lyeoh(at)pop(dot)jaring(dot)my>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens up
Date: 2001-11-28 19:42:35
Message-ID: 3740.1006976555@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> I will document the security problem with PGPASSWORD and add a TODO item
> to remove it in 7.3. Is that OK with everyone?

I don't think we should remove it. Documenting that using it is a
security risk on some platforms seems a good idea, however.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Vince Vielhaber 2001-11-28 19:46:02 Re: Sequence docs
Previous Message Bruce Momjian 2001-11-28 19:17:15 Re: Call for platform testing