Re: another look at macOS SIP

Hi,

On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote:
> I think the way forward here is to get rid of all uses of system() for
> calling between PostgreSQL programs. There are only a handful of those,
> and we already have well-tested replacement code like spawn_process() in
> pg_regress.c that could be used. (Perhaps we could also use that
> opportunity to get rid of the need for shell quoting?)

Yea, I think that'd be good, regardless of SIP.

> There is a minor second issue, namely that /usr/bin/perl also filters
> out DYLD_* environment variables. This can be worked around again by
> using a third-party installation of Perl. You just need to make sure
> that the "prove" program calls that installation instead of the system
> one. (I just manually edited the shebang line. There is probably a
> proper way to do it.)

Hm, could we just have perl code set DYLD_* again? I assume we don't
need prove itself to have it set, and for the testscripts we could just
set it in TestLib.pm or such?

Greetings,

Andres Freund