Re: [PATCH] Add session_preload_libraries configuration parameter

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Dimitri Fontaine <dimitri(at)2ndQuadrant(dot)fr>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: [PATCH] Add session_preload_libraries configuration parameter
Date: 2013-07-08 01:03:24
Message-ID: 1373245404.12837.33.camel@vanquo.pezone.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Sun, 2013-07-07 at 22:50 +0200, Dimitri Fontaine wrote:
> Would it make sense to review the local_preload_libraries semantics
> instead? It looks like session_preload_libraries only adds
> flexibility,
> and that current usages of local_preload_libraries would be served as
> well by the new setting.
>
> Did you figure out a case where a local_preload_libraries setting
> would
> stop working if made into a session_preload_libraries setting?

local_preload_libraries allows unprivileged users to preload whitelisted
libraries. session_preload_libraries allows superusers to preload any
library. It's hard to see how to consolidate those, at least without
adding another setting that whitelists the libraries somehow, at which
point you haven't really gained anything in terms of complexity.

I don't know of any actual legitimate uses of local_preload_libraries.
I recall that the plpgsql debugger was meant to use it, but doesn't
anymore. So it's hard to judge what to do about this, without any
actual use cases.

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Noah Misch 2013-07-08 01:28:34 Re: Re: [Review] Add SPI_gettypmod() to return a field's typemod from a TupleDesc
Previous Message Peter Eisentraut 2013-07-08 00:55:01 Re: Re: [Review] Add SPI_gettypmod() to return a field's typemod from a TupleDesc