Re: [COMMITTERS] pgsql: Add pg_audit, an auditing extension

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: David Steele <david(at)pgmasters(dot)net>
Cc: Noah Misch <noah(at)leadboat(dot)com>, ian(at)2ndquadrant(dot)com, ams(at)2ndquadrant(dot)com, Stephen Frost <sfrost(at)snowman(dot)net>, Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, Robert Haas <robertmhaas(at)gmail(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [COMMITTERS] pgsql: Add pg_audit, an auditing extension
Date: 2015-06-09 21:03:47
Message-ID: 21711.1433883827@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

David Steele <david(at)pgmasters(dot)net> writes:
> My honest, albeit novice, opinion is that it was a mistake to pull
> pg_audit from contrib. I know more than anyone that it had flaws,
> mostly owing to its implementation as an extension, but it also provided
> capability that simply does not exist right now. Recent conversations
> about PGXN demonstrate why that is not (currently) a good alternative
> for distributing extensions. That means pg_audit will have a more
> limited audience than it could have had. That's a shame, because people
> are interested in pg_audit, warts and all.

FWIW, I did not think that the consensus was that pg_audit could never
be in contrib. As I understood it, people felt that (1) the API might
not be sufficiently stable yet, and (2) there might be parts that should
be in core eventually. (2) is problematic only because we do not have
very good tools for migrating things from contrib to core without creating
user-visible compatibility issues; which is not pg_audit's fault but it's
still a constraint we have to keep in mind. So I'd encourage you to keep
working on it and trying to address the issues that were brought up.

regards, tom lane

In response to

Browse pgsql-committers by date

  From Date Subject
Next Message Fujii Masao 2015-06-10 06:26:47 pgsql: Fix typo in comment.
Previous Message David Steele 2015-06-09 19:54:59 Re: [COMMITTERS] pgsql: Add pg_audit, an auditing extension

Browse pgsql-hackers by date

  From Date Subject
Next Message Andrew Dunstan 2015-06-09 21:30:21 Re: Why no jsonb_exists_path()?
Previous Message Michael Paquier 2015-06-09 20:55:16 Re: Information of pg_stat_ssl visible to all users