|
no no no... is not about upgrade libraries, is about a super user failing to "create function ... language c" and with this avoid a super user gets a shell creating the function "system()" in the libc.so. In postgres 8.2 every library intented for use with postgres must carry a magic block to identify itself, but for the moment a can't upgrade a server. I know this is very old but is just a question :). I think the only way is updrade and not use super users, but if I upgrade and I need a super user for load data with copy command and this is a operating system user too for upload de data to the server, What avoid that the user load libraries like system() with the magic block and gets access to the cluster database with user postgres? thank Gerhard regards... > Date: Tue, 15 Feb 2011 08:10:14 +0100 > Subject: Re: mapping libraries > From: gerhard.hintermayer@xxxxxxxxx > To: pgsql-admin@xxxxxxxxxxxxxx > > What exactly do you mean ? Upgrade libraries which postgres depends on > while the server is running ? Depends on the distro I think. I did > this with gentoo, e.g. upgrade glibc while postgres (and other > services) still use the old version. Except from memory issues (both > versions have to be kept in memory) there should'nt be a problem. Next > time postmaster is started (and hopefully does start :-) ) the new > libraries will be used. > > Gerhard > > On Tue, Feb 15, 2011 at 6:34 AM, Fabricio <fabrixio1@xxxxxxxxxxx> wrote: > > Any comment about this? > > > > Regards... > > > > > > ________________________________ > > From: fabrixio1@xxxxxxxxxxx > > To: pgsql-admin@xxxxxxxxxxxxxx > > Subject: mapping libraries > > Date: Thu, 10 Feb 2011 18:19:33 -0700 > > > > > > Hi... > > If i can't upgrade a server with postgres 8.1 and at this time i can't > > delete a super user, Is there any way to avoid that the super user mapping > > libraries in C code? like system in libc.so ? > > regards... > > > > -- > Sent via pgsql-admin mailing list (pgsql-admin@xxxxxxxxxxxxxx) > To make changes to your subscription: > http://www.postgresql.org/mailpref/pgsql-admin |
