break out of the server and access the underlying operating system

Ron <ronljohnsonjr@xxxxxxxxx> · Thu, 21 Oct 2021 21:28:50 -0500



    On 10/21/21 8:50 PM, David G. Johnston wrote:

    
          On Thu, Oct
              21, 2021 at 6:48 PM Wells Oliver <wells.oliver@xxxxxxxxx>
              wrote:

          
            Is there anything out there written about
              what trusted means? The PG community seems pretty trusting
              :)
            
              
          It basically means the programming language
              allows the author of the code to break out of the
                server and access the underlying operating system as
              the postgres user.  I believe this is written in the docs
              - but I haven't searched recently.
          

    Which -- by design -- RDS won't let you do.  Thus, the lack of
    untrusted modules.

    
    -- 

      Angular momentum makes the world go 'round.

Re: RDS and postgres extension approval