| From: | Robert Haas <robertmhaas(at)gmail(dot)com> |
|---|---|
| To: | Andrew Dunstan <andrew(at)dunslane(dot)net> |
| Cc: | "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org> |
| Subject: | Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings |
| Date: | 2020-01-09 14:18:45 |
| Message-ID: | CA+TgmoZEjyv_PD=2cinkbDA_chyLNAcBPL_9bKJQ6bc=nw+FHA@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-committers pgsql-hackers |
On Thu, Jan 9, 2020 at 3:11 AM Andrew Dunstan <andrew(at)dunslane(dot)net> wrote:
> Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings
>
> This allows different users to authenticate with different certificates.
>
> Author: Craig Ringer
>
> https://git.postgresql.org/pg/commitdiff/f5fd995a1a24e6571d26b1e29c4dc179112b1003
Does this mean that a non-superuser can induce postgres_fdw to read an
arbitrary file from the local filesystem?
--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Christoph Berg | 2020-01-09 14:38:45 | Re: pgsql: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings |
| Previous Message | Robert Haas | 2020-01-09 14:12:48 | Re: pgsql: tableam: New callback relation_fetch_toast_slice. |
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Dagfinn Ilmari Mannsåker | 2020-01-09 14:35:19 | Re: Fixing parallel make of libpq |
| Previous Message | Tom Lane | 2020-01-09 14:17:12 | Re: Fixing parallel make of libpq |