Re: Allow 'sslkey' and 'sslcert' in postgres_fdw user mappings
Daniel Gustafsson <[email protected]> Thu, 9 Jan 2020 23:00:59 +0100
| Newsgroups | gmane.comp.db.postgresql.devel.general |
|---|---|
| Message-ID | <[email protected]> |
> On 9 Jan 2020, at 22:38, Andrew Dunstan <[email protected]> wrote: > I'm not (yet) > convinced that there is any significant security threat here. This > doesn't give the user or indeed any postgres code any access to the > contents of these files. But if there is a consensus to restrict this > I'll do it. I've seen successful exploits made from parts that I in my wildest imagination couldn't think be useful, so FWIW +1 for adding belts to suspenders and restricting this. cheers ./daniel