Skip site navigation (1) Skip section navigation (2)

Re: [GENERAL] BUG #1830: Non-super-user must be able to copy

From: Stephan Szabo <sszabo(at)megazone(dot)bigpanda(dot)com>
To: Bernard <bht(at)actrix(dot)gen(dot)nz>
Cc: pgsql-bugs(at)postgresql(dot)org, pgsql-general(at)postgresql(dot)org
Subject: Re: [GENERAL] BUG #1830: Non-super-user must be able to copy
Date: 2005-08-19 15:03:39
Message-ID: (view raw, whole thread or download thread mbox)
Lists: pgsql-bugspgsql-general
On Fri, 19 Aug 2005, Bernard wrote:

> But we can take this one step further so that we don't even need to
> trust ourselves:
> The logical next step is that for a non-postgresql-superuser user,
> COPY FROM files have to be world-readable and COPY TO files and
> directories have to be world-writable. The server checks the file
> attributes and grants copy permission depending on them. Obviously any
> Postrgres system files must not be world-readable and world-writable.
> Problem solved. One doesn't need to be a genius to figure this out.

No, it's not solved.  It prevents that problem for the configuration
files, but still gives access to other world readable files on the system
for example /etc/passwd on many systems (yes it's not terribly interesting
in general, but still is often not acceptable to retrieve).

You'd probably want to add the ability to setup which directories that are
allowed to be read or written to as configuration separately from unix
file permissions.

No, it doesn't take a genius, but it's not as trivial as you seem to think
it is, either.  And honestly, until there's a workable plan that addresses
these issues, opening it up seems foolish.

In response to


pgsql-bugs by date

Next:From: Jrg HausteinDate: 2005-08-19 15:08:38
Subject: BUG #1837: varchar/text operator "=" not unicode safe?
Previous:From: Tom LaneDate: 2005-08-19 14:38:32
Subject: Re: [GENERAL] BUG #1830: Non-super-user must be able to copy from a

pgsql-general by date

Next:From: Stephan SzaboDate: 2005-08-19 15:12:08
Subject: Re: [GENERAL] Cascades Failing
Previous:From: Nigel HorneDate: 2005-08-19 14:58:20

Privacy Policy | About PostgreSQL
Copyright © 1996-2017 The PostgreSQL Global Development Group