Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Andreas Pflug
Tom Lane wrote: > Andreas Pflug <[EMAIL PROTECTED]> writes: > >> what issues might arise if the output is redirected to a legal tmp file? >> > > Well, (1) finding a place to put the temp file, ie a writable directory; > (2) ensuring the file is removed afterwards; (3) not exposing the user

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Tom Lane
Andreas Pflug <[EMAIL PROTECTED]> writes: > what issues might arise if the output is redirected to a legal tmp file? Well, (1) finding a place to put the temp file, ie a writable directory; (2) ensuring the file is removed afterwards; (3) not exposing the user to security hazards due to unsafe use

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Bruce Momjian
Andreas Pflug wrote: > Bruce Momjian wrote: > > Andreas Pflug wrote: > >> Tom Lane wrote: > >>> Andrew Dunstan <[EMAIL PROTECTED]> writes: > >>> > I am more than somewhat perplexed as to why the NUL device should be a > security risk ... what are they thinking?? > > >>> Frank

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Andreas Pflug
Bruce Momjian wrote: > Andreas Pflug wrote: >> Tom Lane wrote: >>> Andrew Dunstan <[EMAIL PROTECTED]> writes: >>> I am more than somewhat perplexed as to why the NUL device should be a security risk ... what are they thinking?? >>> Frankly, I don't believe it; even Microsoft

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Bruce Momjian
Andreas Pflug wrote: > Tom Lane wrote: > > Andrew Dunstan <[EMAIL PROTECTED]> writes: > > > >> I am more than somewhat perplexed as to why the NUL device should be a > >> security risk ... what are they thinking?? > >> > > > > Frankly, I don't believe it; even Microsoft can't be that stupid

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Tom Lane
"dror" <[EMAIL PROTECTED]> writes: > Hi Andrew, Regarding to your comments: > 1. a patch is generated by the pro= > gram "diff"I will do it ,if needed> 2. before we do anything, as Tom Lane s= > ays, we need verification of the > problem, preferably in writing from Micr= > osoft.I do understand tha

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-15 Thread Andreas Pflug
Tom Lane wrote: > Andrew Dunstan <[EMAIL PROTECTED]> writes: > >> I am more than somewhat perplexed as to why the NUL device should be a >> security risk ... what are they thinking?? >> > > Frankly, I don't believe it; even Microsoft can't be that stupid. > And I can't find any suggestion t

Re: [HACKERS] [PATCHES] [Patch] - Fix for bug #2558, InitDB failed to run

2006-08-14 Thread Tom Lane
Andrew Dunstan <[EMAIL PROTECTED]> writes: > I am more than somewhat perplexed as to why the NUL device should be a > security risk ... what are they thinking?? Frankly, I don't believe it; even Microsoft can't be that stupid. And I can't find any suggestion that they've done this in a google sear