On Thu, 4 Dec 2025 at 11:56, Kirill Reshke <[email protected]> wrote: > > One idea would be to disallow FROM PROGRAM when connecting over the > network instead of a Unix socke > > How this would be protected from connecting to PostgreSQL over the > network and then executing dblink, making local (socket) connection?
Good question. I think the easiest would be to always disallow FROM PROGRAM (by default) instead of only when connecting over the network. Another option would be to have dblink (and pg_fdw) tell postgres (wih e.g. a GUC being set in the StartupMessage) that it should be considered a remote connection for these purposes.
