Re: [HACKERS] system administration functions with hardcoded superuser checks

2013-01-16 Thread Kohei KaiGai
2013/1/15 Peter Eisentraut : > On 12/18/12 12:09 PM, Peter Eisentraut wrote: >> There are some system administration functions that have hardcoded >> superuser checks, specifically: >> >> pg_reload_conf >> pg_rotate_logfile >> pg_read_file >> pg_read_file_all >> pg_read_binary_file >> pg_read_binar

Re: [HACKERS] system administration functions with hardcoded superuser checks

2013-01-15 Thread Peter Eisentraut
On 12/18/12 12:09 PM, Peter Eisentraut wrote: > There are some system administration functions that have hardcoded > superuser checks, specifically: > > pg_reload_conf > pg_rotate_logfile > pg_read_file > pg_read_file_all > pg_read_binary_file > pg_read_binary_file_all > pg_stat_file > pg_ls_dir >

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-19 Thread Tom Lane
Tomas Vondra writes: > On 19.12.2012 07:34, Magnus Hagander wrote: >> Granting executability on pg_read_xyz is pretty darn close to granting >> superuser, without explicitly asking for it. Well, you get "read only >> superuser". If we want to make that step as easy as just GRANT, we >> really need

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-19 Thread Tomas Vondra
On 19.12.2012 07:34, Magnus Hagander wrote: > On Wed, Dec 19, 2012 at 1:58 AM, Tomas Vondra wrote: >> On 18.12.2012 18:38, Pavel Stehule wrote: >>> 2012/12/18 Peter Eisentraut : There are some system administration functions that have hardcoded superuser checks, specifically: p

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-19 Thread Simon Riggs
On 19 December 2012 06:34, Magnus Hagander wrote: > Granting executability on pg_read_xyz is pretty darn close to granting > superuser, without explicitly asking for it. Well, you get "read only > superuser". If we want to make that step as easy as just GRANT, we > really need to write some *very

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Magnus Hagander
On Wed, Dec 19, 2012 at 1:58 AM, Tomas Vondra wrote: > On 18.12.2012 18:38, Pavel Stehule wrote: >> 2012/12/18 Peter Eisentraut : >>> There are some system administration functions that have hardcoded >>> superuser checks, specifically: >>> >>> pg_reload_conf >>> pg_rotate_logfile >>> >>> Some of

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Tomas Vondra
On 18.12.2012 18:38, Pavel Stehule wrote: > 2012/12/18 Peter Eisentraut : >> There are some system administration functions that have hardcoded >> superuser checks, specifically: >> >> pg_reload_conf >> pg_rotate_logfile >> >> Some of these are useful in monitoring or maintenance tools, and the >>

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Robert Haas
On Tue, Dec 18, 2012 at 7:41 PM, Noah Misch wrote: > On Tue, Dec 18, 2012 at 12:09:10PM -0500, Peter Eisentraut wrote: >> There are some system administration functions that have hardcoded >> superuser checks, specifically: >> >> pg_reload_conf >> pg_rotate_logfile >> pg_read_file >> pg_read_file_

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Noah Misch
On Tue, Dec 18, 2012 at 12:09:10PM -0500, Peter Eisentraut wrote: > There are some system administration functions that have hardcoded > superuser checks, specifically: > > pg_reload_conf > pg_rotate_logfile > pg_read_file > pg_read_file_all > pg_read_binary_file > pg_read_binary_file_all > pg_sta

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Pavel Stehule
2012/12/18 Peter Eisentraut : > There are some system administration functions that have hardcoded > superuser checks, specifically: > > pg_reload_conf > pg_rotate_logfile > > Some of these are useful in monitoring or maintenance tools, and the > hardcoded superuser checks require that these tools

Re: [HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Simon Riggs
On 18 December 2012 17:09, Peter Eisentraut wrote: > There are some system administration functions that have hardcoded > superuser checks, specifically: > > pg_reload_conf > pg_rotate_logfile > pg_read_file > pg_read_file_all > pg_read_binary_file > pg_read_binary_file_all > pg_stat_file > pg_ls_

[HACKERS] system administration functions with hardcoded superuser checks

2012-12-18 Thread Peter Eisentraut
There are some system administration functions that have hardcoded superuser checks, specifically: pg_reload_conf pg_rotate_logfile pg_read_file pg_read_file_all pg_read_binary_file pg_read_binary_file_all pg_stat_file pg_ls_dir Some of these are useful in monitoring or maintenance tools, and the