Re: pageinspect some function no need superuser priv

From: Kirill Reshke <reshkekirill(at)gmail(dot)com>
To: jian he <jian(dot)universality(at)gmail(dot)com>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: pageinspect some function no need superuser priv
Date: 2025-10-14 13:32:20
Message-ID: CALdSSPhHihvo8CqacXxnKW6LLqJpq-q5okOoRzsS6j8jQYZu6Q@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Tue, 14 Oct 2025, 18:27 jian he, <jian(dot)universality(at)gmail(dot)com> wrote:

> hi.
>
> just came to my mind.
>
> If you're the table owner, you should be allowed to use get_raw_page (and
> other
> pageinspect module functions)?
> We can use RangeVarGetRelidExtended with
> RangeVarCallbackOwnsRelation to perform the ownership check.
>
> Attached is a draft POC.
> Am I missing anything obvious?
>

Hi!
I was also wondering if there is any security vulnerability with that.
I was thinking about page lsn, checkpoint and wal compression as a possible
way to abuse, but did not managed to came up with exploit

>

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Melanie Plageman 2025-10-14 14:16:24 Re: eliminate xl_heap_visible to reduce WAL (and eventually set VM on-access)
Previous Message jian he 2025-10-14 13:26:56 pageinspect some function no need superuser priv