Search Postgresql Archives

Re: What is unsecure postgres languages? How to disable them?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



dipti shah wrote:
Sorry Albe for confusion. Yes, I meant untrusted languages like C, PL/PerlU, PL/PythonU etc...

Thanks a lot you and Tino for nice reply. Could you guys tell me how could I verify whether those languages are installed on my PostGreSQL server?

Thanks for being there,
Dipti

On Mon, Feb 22, 2010 at 8:14 PM, Albe Laurenz <laurenz.albe@xxxxxxxxxx <mailto:laurenz.albe@xxxxxxxxxx>> wrote:

    dipti shah wrote:
     > Could anyone please tell me what is unsecure postgres
     > languages(like C, pgperl, pgpython??). How to disable them or
     > restrict them only for super user?

    I have never heard of "unsecure" languages - what exactly do you mean?

    If you mean "untrusted" languages like PL/PerlU, they are not
    installed by default *and* they are restricted to superusers.

    You cannot disable C functions, but to define them you must also
    have superuser privileges.

    Yours,
    Laurenz Albe


As mentioned you can't remove c/internal and for the others, they are not installed unless you went out of your way to install them.

SELECT *
FROM pg_catalog.pg_language
WHERE lanpltrusted = false

Scott

--
Sent via pgsql-general mailing list (pgsql-general@xxxxxxxxxxxxxx)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux