Re: another look at macOS SIP

2019-09-18 Thread Robert Haas
On Tue, Sep 17, 2019 at 1:52 PM Andres Freund wrote: > On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote: > > I think the way forward here is to get rid of all uses of system() for > > calling between PostgreSQL programs. There are only a handful of those, > > and we already have well-tested r

Re: another look at macOS SIP

2019-09-17 Thread Tom Lane
Peter Eisentraut writes: > On 2019-09-17 21:43, Tom Lane wrote: >> Yeah, that's what I was suggesting. "Use another copy of Perl" doesn't >> seem like an acceptable answer, or at least it's hardly better than >> "turn off SIP". > In my mind, the Perl aspect of this is the most trivial part of th

Re: another look at macOS SIP

2019-09-17 Thread Peter Eisentraut
On 2019-09-17 21:43, Tom Lane wrote: > Yeah, that's what I was suggesting. "Use another copy of Perl" doesn't > seem like an acceptable answer, or at least it's hardly better than > "turn off SIP". In my mind, the Perl aspect of this is the most trivial part of the problem. "brew install perl" i

Re: another look at macOS SIP

2019-09-17 Thread Tom Lane
Andres Freund writes: > On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote: >> There is a minor second issue, namely that /usr/bin/perl also filters >> out DYLD_* environment variables. This can be worked around again by >> using a third-party installation of Perl. > Hm, could we just have per

Re: another look at macOS SIP

2019-09-17 Thread Andres Freund
Hi, On 2019-09-10 19:14:19 +0200, Peter Eisentraut wrote: > I think the way forward here is to get rid of all uses of system() for > calling between PostgreSQL programs. There are only a handful of those, > and we already have well-tested replacement code like spawn_process() in > pg_regress.c th

Re: another look at macOS SIP

2019-09-12 Thread Peter Eisentraut
On 2019-09-10 19:26, Tom Lane wrote: >> I think the way forward here is to get rid of all uses of system() for >> calling between PostgreSQL programs. > > We could do that perhaps, but how are you going to get make to not use > /bin/sh while spawning subprocesses? I don't think we want to also >

Re: another look at macOS SIP

2019-09-10 Thread Tom Lane
Peter Eisentraut writes: > I have figured out another solution to the problem that macOS SIP > defeats the use of DYLD_LIBRARY_PATH for running the temp-install > regression tests. It's not without problems either, but it might show a > path forward. > ... > The precise issue is that /bin/sh filt

another look at macOS SIP

2019-09-10 Thread Peter Eisentraut
I have figured out another solution to the problem that macOS SIP defeats the use of DYLD_LIBRARY_PATH for running the temp-install regression tests. It's not without problems either, but it might show a path forward. First of all, I think I now know the exact mechanism by which this breakage hap