Re: another look at macOS SIP

From: Andres Freund <andres(at)anarazel(dot)de>
To: Peter Eisentraut <peter(dot)eisentraut(at)2ndquadrant(dot)com>
Cc: pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: another look at macOS SIP
Date: 2019-09-17 17:52:21
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers


On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote:
> I think the way forward here is to get rid of all uses of system() for
> calling between PostgreSQL programs. There are only a handful of those,
> and we already have well-tested replacement code like spawn_process() in
> pg_regress.c that could be used. (Perhaps we could also use that
> opportunity to get rid of the need for shell quoting?)

Yea, I think that'd be good, regardless of SIP.

> There is a minor second issue, namely that /usr/bin/perl also filters
> out DYLD_* environment variables. This can be worked around again by
> using a third-party installation of Perl. You just need to make sure
> that the "prove" program calls that installation instead of the system
> one. (I just manually edited the shebang line. There is probably a
> proper way to do it.)

Hm, could we just have perl code set DYLD_* again? I assume we don't
need prove itself to have it set, and for the testscripts we could just
set it in or such?


Andres Freund

In response to


Browse pgsql-hackers by date

  From Date Subject
Next Message Jonathan S. Katz 2019-09-17 17:58:31 Re: Define jsonpath functions as stable
Previous Message Stephen Frost 2019-09-17 17:48:00 Re: block-level incremental backup