Re: [PATCHES] plperl Safe restrictions

From: Rod Taylor <pg(at)rbt(dot)ca>
To: Greg Stark <gsstark(at)mit(dot)edu>
Cc: PostgreSQL Development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [PATCHES] plperl Safe restrictions
Date: 2004-12-02 20:07:08
Message-ID: 1102018028.99116.234.camel@home
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers pgsql-patches

On Thu, 2004-12-02 at 02:21 -0500, Greg Stark wrote:
> "Andrew Dunstan" <andrew(at)dunslane(dot)net> writes:
>
> > John wanted us to allow use of the 'locale' and 'utf8' pragmas in trusted
> > code.
>
> You know, there's something twisted in postgres's naming scheme here. How is
> it that "trusted" languages the ones that need a sandbox? and "untrusted"
> languages the ones that get to run amok without restrictions?
>
> I would have thought it would be the other way around.

It's not that you trust the language, it that you trust the PostgreSQL
despite the language.

--

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Marc G. Fournier 2004-12-02 20:11:46 Re: [HACKERS] Adding Reply-To: <listname> to Lists
Previous Message Alvaro Herrera 2004-12-02 19:59:54 Re: [HACKERS] Adding Reply-To: <listname> to Lists configuration ...

Browse pgsql-patches by date

  From Date Subject
Next Message Mark Kirkwood 2004-12-02 20:34:41 Docs - Plpgsql trigger example auditing changes into another table
Previous Message Bruce Momjian 2004-12-02 18:11:03 Re: [BUGS] solaris non gcc compiler debug options