Re: Information of pg_stat_ssl visible to all users

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Andres Freund <andres(at)anarazel(dot)de>
Cc: Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Peter Eisentraut <peter_e(at)gmx(dot)net>, Michael Paquier <michael(dot)paquier(at)gmail(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Information of pg_stat_ssl visible to all users
Date: 2015-07-02 21:06:40
Message-ID: CABUevEypA25+y54bkpDOKCa9joODDtNaXNjrx3ixX8-5DCYb-w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Thu, Jul 2, 2015 at 10:06 PM, Andres Freund <andres(at)anarazel(dot)de> wrote:

> On 2015-07-02 16:52:01 -0300, Alvaro Herrera wrote:
> > If there's interest in closing these holes, this might be a first
>
> I don't think such an isolated attempt buys us anything except maybe
> unsatisfied users.
>
> I can see a benefit in allowing to restrict information about users and
> such in other clusters, but changing stat_ssl seeems to be an
> inconsequentially small problem on that path.
>

We discussed earlier having a "monitoring" role or attribute or something
like that, and I think this would be another case of that. We definitely
want to go towards something like that, but that's not happening in 9.5...

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2015-07-02 21:27:38 Re: Exposing PG_VERSION_NUM in pg_config
Previous Message Heikki Linnakangas 2015-07-02 20:56:16 Re: PATCH:do not set Win32 server-side socket buffer size on windows 2012