| From: | KONDO Mitsumasa <kondo(dot)mitsumasa(at)lab(dot)ntt(dot)co(dot)jp> |
|---|---|
| To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-committers(at)postgresql(dot)org |
| Subject: | Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me |
| Date: | 2014-01-28 01:12:34 |
| Message-ID: | 52E70402.6020706@lab.ntt.co.jp |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers pgsql-hackers |
Hi,
(2014/01/28 5:38), Tom Lane wrote:
> Keep pg_stat_statements' query texts in a file, not in shared memory.
This patch has security problem that root can easily see the statement file in
database cluster.
Is it OK or disscussed? If root user and operation user don't have access
privilege in their security policy,
they must not look statement-log at all. And they are not always database superuser.
Regards,
--
Mitsumasa KONDO
NTT Open Source Software Center
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2014-01-28 01:14:18 | Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me |
| Previous Message | Tom Lane | 2014-01-27 20:38:03 | pgsql: Keep pg_stat_statements' query texts in a file, not in shared me |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2014-01-28 01:14:18 | Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me |
| Previous Message | Tom Lane | 2014-01-28 00:19:21 | Re: INTERVAL overflow detection is terribly broken |