On Mon, Nov 2, 2015 at 10:13 PM, Amit Kapila <amit.kapil...@gmail.com> wrote: > I think that is the sensible way to deal with this and any other such > parameters. We already have a way to disallow setting of individual > parameters (GUC_DISALLOW_IN_AUTO_FILE) via Alter System. > Currently we disallow to set data_directory via this mechanism and I think > we can do the same for other parameters if required. Do you think we > should do some investigation/analysis about un-safe parameters rather > then doing it in retail fashion?
-1. This was discussed before, and I feel about it now the same way I felt about it then: disallowing all GUCs that could potentially cause the server not to start would make ALTER SYSTEM a whole lot less useful. -- Robert Haas EnterpriseDB: http://www.enterprisedb.com The Enterprise PostgreSQL Company -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers