Re: [HACKERS] createdb with alternate location

Peter Eisentraut <peter_e(at)gmx(dot)net> writes:
> [ CREATE DATABASE WITH LOCATION shouldn't depend on environment vars ]

I agree, this oughta be flushed. Is the expansion routine used in any
other contexts where depending on an environment var *would* make sense?

> What really gets me, though, is how this sort of scheme is supposed to
> create security in the first place.

I doubt security was foremost in the mind of whoever did that. Still,
the environment vars in question are those created by the dbadmin before
starting the postmaster; it's not like unprivileged users can affect
them. So I'd say it's just a chance to shoot yourself in the foot,
not a question of exposing yourself to enemy fire...

regards, tom lane