Request a Demo
Home   >   mailing lists

Enhance security permissions - Mailing list pgsql-hackers

From Ranier Vilela
Subject Enhance security permissions
Date
Msg-id CAEudQAo0S06MbbS2AHXFzHgjnMULxhcwpVkVp4o9v_kkECA-Og@mail.gmail.com
Whole thread Raw
Responses Re: Enhance security permissions
List pgsql-hackers
Tree view
Hi.

I noticed this while checking the source (src/interfaces/libpq/fe-connect.c).
It seems that S_IRWXU permission is harmful too.

In accord with [1] and [2] this should also be checked.
Also, all other places in the source,  S_IRWXU are checked.

So, I propose adding this check to enhance the security.

Maybe the error messages, do they need improvement as well?

patchs attached.

best regards,
Ranier Vilela

Attachment

pgsql-hackers by date:

Previous
From: Jakub Wartak
Date:
Subject: Re: Adding basic NUMA awareness
Next
From: Bryan Green
Date:
Subject: Re: Enhance security permissions