Skip site navigation (1) Skip section navigation (2)

Re: What is unsecure postgres languages? How to disable them?

From: dipti shah <shahdipti1980(at)gmail(dot)com>
To: Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>, tino(at)wildenhain(dot)de
Cc: pgsql-general(at)postgresql(dot)org, pgsql-novice <pgsql-novice(at)postgresql(dot)org>
Subject: Re: What is unsecure postgres languages? How to disable them?
Date: 2010-02-22 17:34:37
Message-ID: d5b05a951002220934x3e352c8em7c84334e4710826a@mail.gmail.com (view raw or flat)
Thread:
Lists: pgsql-generalpgsql-novice
Sorry Albe for confusion. Yes, I meant untrusted languages like C, PL/PerlU,
PL/PythonU etc...

Thanks a lot you and Tino for nice reply. Could you guys tell me how could I
verify whether those languages are installed on my PostGreSQL server?

Thanks for being there,
Dipti

On Mon, Feb 22, 2010 at 8:14 PM, Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>wrote:

> dipti shah wrote:
> > Could anyone please tell me what is unsecure postgres
> > languages(like C, pgperl, pgpython??). How to disable them or
> > restrict them only for super user?
>
> I have never heard of "unsecure" languages - what exactly do you mean?
>
> If you mean "untrusted" languages like PL/PerlU, they are not
> installed by default *and* they are restricted to superusers.
>
> You cannot disable C functions, but to define them you must also
> have superuser privileges.
>
> Yours,
> Laurenz Albe
>

In response to

Responses

pgsql-novice by date

Next:From: dipti shahDate: 2010-02-22 17:47:26
Subject: SET Role doesn't work from Security Definer Function...
Previous:From: Bruce MomjianDate: 2010-02-22 16:57:16
Subject: Re: which mailing list for bindings writers

pgsql-general by date

Next:From: Kevin GrittnerDate: 2010-02-22 17:46:09
Subject: Re: helo
Previous:From: Kris JurkaDate: 2010-02-22 17:25:29
Subject: Re: helo

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group