Re: [HACKERS] plperl intial pass

From: wieck(at)debis(dot)com (Jan Wieck)
To: oleg(at)sai(dot)msu(dot)su (Oleg Bartunov)
Cc: mhh(at)mindspring(dot)com, pgsql-hackers(at)postgreSQL(dot)org
Subject: Re: [HACKERS] plperl intial pass
Date: 1999-07-26 09:15:25
Message-ID: m118gqz-0003kvC@orion.SAPserv.Hamburg.dsh.de
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

>
> Great,
>
> just compiled and install but need to look at some examples :-)
> btw, here is a patch for createlang command to enable plperl
> I'm not sure about trusted field.
>
> --- createlang Sat Jul 24 22:27:05 1999
> +++ /usr/local/pgsql/bin/createlang Wed Jul 21 19:36:55 1999
> @@ -84,9 +84,6 @@
> plpgsql) lancomp="PL/pgSQL"
> trusted="TRUSTED"
> handler="plpgsql_call_handler";;
> - plperl) lancomp="PL/Perl"
> - trusted="TRUSTED"
> - handler="plperl_call_handler";;
> pltcl) lancomp="PL/Tcl"
> trusted="TRUSTED"
> handler="pltcl_call_handler";;

I wouldn't make it a TRUSTED language right now, because
until PL/Perl has a safe mode (what Mark said it hasn't now)
it is a security hole. Unpriviliged users could create
functions in PL/Perl that modify the hba.conf!

Jan

--

#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me. #
#========================================= wieck(at)debis(dot)com (Jan Wieck) #

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Jan Wieck 1999-07-26 09:50:52 Re: [HACKERS] plperl intial pass
Previous Message Philip Warner 1999-07-26 09:14:02 Re: AW: [HACKERS] inserts/updates problem under stressing !