On Thu, 4 Dec 2025 at 21:33, Jelte Fennema-Nio <[email protected]> wrote: > > On Thu, 4 Dec 2025 at 11:56, Kirill Reshke <[email protected]> wrote: > > > One idea would be to disallow FROM PROGRAM when connecting over the > > network instead of a Unix socke > > > > How this would be protected from connecting to PostgreSQL over the > > network and then executing dblink, making local (socket) connection? > > Good question. I think the easiest would be to always disallow FROM > PROGRAM (by default) instead of only when connecting over the network.
How? with GUC? > Another option would be to have dblink (and pg_fdw) tell postgres (wih > e.g. a GUC being set in the StartupMessage) that it should be > considered a remote connection for these purposes. Again, if we are using GUC to tell somebody something about security, this doesn't work. Superuser can easily redefine any GUC. -- Best regards, Kirill Reshke
