On 2017-01-05 03:12:09 +0000, Tsunakawa, Takayuki wrote: > From: pgsql-hackers-ow...@postgresql.org > > [mailto:pgsql-hackers-ow...@postgresql.org] On Behalf Of Magnus Hagander > > For the pg_ctl changes, we're going from removing all privilieges from the > > token, to removing none. Are there any other privileges that we should be > > worried about? I think you may be correct in that it's overkill to do it, > > but I think we need some more specifics to decide that. > > This page lists the privileges. Is there anyhing you are concerned about? > > https://msdn.microsoft.com/ja-jp/library/windows/desktop/bb530716(v=vs.85).aspx
Aren't like nearly all of them a concern? We gone from having some containment (not being to create users, shut the system down, ...), to none. I do however think there's a fair argument to be made that other platforms do not have a similar containment (no root, but sudo etc is still possible), and that the containment isn't super strong. Can't we, to reduce the size of the behavioural change, just use AdjustTokenPrivileges() to re-add the privileges we want? Regards, Andres -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers
