Re: postgresql-contrib risks?

On Thu, Jan 06, 2005 at 15:09:54 +0100,
Martijn van Oosterhout <kleptog(at)svana(dot)org> wrote:
>
> One question though, if you are granted filesystem access to the
> server, there's no reason why you couldn't just get the pgcrypto module
> in your home directory and load it into the server yourself. I think
> all you need is superuser access to your database to loaded untrusted
> modules...

Hopefully his provider doesn't let people install functions written in
untrusted languages. pgcrypto uses C functions and he will probably need
his provider to load it for him.

If there is some trusted language installed that he has access to, he may
be able to create a function in that language that does what he wants.
He doesn't need file system access to do that.