Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me

From: Peter Geoghegan <pg(at)heroku(dot)com>
To: KONDO Mitsumasa <kondo(dot)mitsumasa(at)lab(dot)ntt(dot)co(dot)jp>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, pgsql-committers(at)postgresql(dot)org
Subject: Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me
Date: 2014-01-28 01:15:23
Message-ID: CAM3SWZQxKVfMufAuBQzJeAjw1i_xAvRXX3kD5f=mFqHYjq7k1g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

On Mon, Jan 27, 2014 at 5:12 PM, KONDO Mitsumasa
<kondo(dot)mitsumasa(at)lab(dot)ntt(dot)co(dot)jp> wrote:
> This patch has security problem that root can easily see the statement file
> in database cluster.

By default, we always serialize statements along with their query
texts to disk on shutdown. Until May of 2012, pg_stat_statements
didn't bother unlinking on startup, and so the file with query texts
was always on the PGDATA filesystem. What's the difference?

--
Peter Geoghegan

In response to

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2014-01-28 01:23:38 Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me
Previous Message Tom Lane 2014-01-28 01:14:18 Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2014-01-28 01:23:38 Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me
Previous Message Tom Lane 2014-01-28 01:14:18 Re: pgsql: Keep pg_stat_statements' query texts in a file, not in shared me