From: | Magnus Hagander <magnus(at)hagander(dot)net> |
---|---|
To: | Andres Freund <andres(at)anarazel(dot)de> |
Cc: | Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Peter Eisentraut <peter_e(at)gmx(dot)net>, Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: Information of pg_stat_ssl visible to all users |
Date: | 2015-07-02 21:06:40 |
Message-ID: | CABUevEypA25+y54bkpDOKCa9joODDtNaXNjrx3ixX8-5DCYb-w@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
On Thu, Jul 2, 2015 at 10:06 PM, Andres Freund <andres(at)anarazel(dot)de> wrote:
> On 2015-07-02 16:52:01 -0300, Alvaro Herrera wrote:
> > If there's interest in closing these holes, this might be a first
>
> I don't think such an isolated attempt buys us anything except maybe
> unsatisfied users.
>
> I can see a benefit in allowing to restrict information about users and
> such in other clusters, but changing stat_ssl seeems to be an
> inconsequentially small problem on that path.
>
We discussed earlier having a "monitoring" role or attribute or something
like that, and I think this would be another case of that. We definitely
want to go towards something like that, but that's not happening in 9.5...
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2015-07-02 21:27:38 | Re: Exposing PG_VERSION_NUM in pg_config |
Previous Message | Heikki Linnakangas | 2015-07-02 20:56:16 | Re: PATCH:do not set Win32 server-side socket buffer size on windows 2012 |