Re: What is unsecure postgres languages? How to disable them?

From: dipti shah <shahdipti1980(at)gmail(dot)com>
To: Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>, tino(at)wildenhain(dot)de
Cc: pgsql-general(at)postgresql(dot)org, pgsql-novice <pgsql-novice(at)postgresql(dot)org>
Subject: Re: What is unsecure postgres languages? How to disable them?
Date: 2010-02-22 17:34:37
Message-ID: d5b05a951002220934x3e352c8em7c84334e4710826a@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-novice

Sorry Albe for confusion. Yes, I meant untrusted languages like C, PL/PerlU,
PL/PythonU etc...

Thanks a lot you and Tino for nice reply. Could you guys tell me how could I
verify whether those languages are installed on my PostGreSQL server?

Thanks for being there,
Dipti

On Mon, Feb 22, 2010 at 8:14 PM, Albe Laurenz <laurenz(dot)albe(at)wien(dot)gv(dot)at>wrote:

> dipti shah wrote:
> > Could anyone please tell me what is unsecure postgres
> > languages(like C, pgperl, pgpython??). How to disable them or
> > restrict them only for super user?
>
> I have never heard of "unsecure" languages - what exactly do you mean?
>
> If you mean "untrusted" languages like PL/PerlU, they are not
> installed by default *and* they are restricted to superusers.
>
> You cannot disable C functions, but to define them you must also
> have superuser privileges.
>
> Yours,
> Laurenz Albe
>

In response to

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Kevin Grittner 2010-02-22 17:46:09 Re: helo
Previous Message Kris Jurka 2010-02-22 17:25:29 Re: helo

Browse pgsql-novice by date

  From Date Subject
Next Message dipti shah 2010-02-22 17:47:26 SET Role doesn't work from Security Definer Function...
Previous Message Bruce Momjian 2010-02-22 16:57:16 Re: which mailing list for bindings writers