pgsql: Lock down regression testing temporary clusters on Windows.

From: Noah Misch <noah(at)leadboat(dot)com>
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: Lock down regression testing temporary clusters on Windows.
Date: 2014-12-18 03:53:36
Message-ID: E1Y1S9g-0004Bk-Ro@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Lock down regression testing temporary clusters on Windows.

Use SSPI authentication to allow connections exclusively from the OS
user that launched the test suite. This closes on Windows the
vulnerability that commit be76a6d39e2832d4b88c0e1cc381aa44a7f86881
closed on other platforms. Users of "make installcheck" or custom test
harnesses can run "pg_regress --config-auth=DATADIR" to activate the
same authentication configuration that "make check" would use.
Back-patch to 9.0 (all supported versions).

Security: CVE-2014-0067

Branch
------
REL9_0_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/6d45ee572d0f698c91495e458b52be35c2b3cae5

Modified Files
--------------
contrib/dblink/Makefile | 3 +-
contrib/dblink/expected/dblink.out | 2 -
contrib/dblink/sql/dblink.sql | 2 -
doc/src/sgml/regress.sgml | 13 ---
src/test/regress/pg_regress.c | 175 ++++++++++++++++++++++++++++++++++++
5 files changed, 177 insertions(+), 18 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Noah Misch 2014-12-18 06:27:31 pgsql: Fix previous commit for TAP test suites in VPATH builds.
Previous Message Tom Lane 2014-12-17 22:01:05 pgsql: Allow CHECK constraints to be placed on foreign tables.