Re: [HACKERS] GUC --- prevent non-super user changes

On Wed, 2003-06-11 at 01:01, Bruce Momjian wrote:
> Here is a proposed fix for the new SUSET of various variables. The
> solution is to create a new GUC context called PGC_USERLIMIT, which
> limits changes by non-super users. For example, non-super users can
> turn on logging, but can't turn it off, and log_min_* logging can have
> added output, but not less output.
>

Is there a danger here that users can crank logging up to the max and
either crash a server due to i/o load, or perhaps create enough "noise"
to cover tracks of something malicious?

Robert Treat
--
Build A Brighter Lamp :: Linux Apache {middleware} PostgreSQL