Dave Page <dp...@pgadmin.org> writes: > The risks are pretty low imho. Not having the flag means that the > server has access to the handles of objects in other jobs in the same > session. When running as a service, that's basically nothing as the > service runs in it's own session and is isolated through other means. > When run from the command line, a hacked binary could send messages to > the users UI (buttons and other controls for example). It would be a > difficult attack to pull off, and very hard to gain from it. It's easy > enough to leave the flag in console mode however - that does work on > Windows 7.
Okay, but +1 for leaving it on in console mode. regards, tom lane -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers