Re: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack

From: "Bossart, Nathan" <bossartn(at)amazon(dot)com>
To: Michael Paquier <michael(at)paquier(dot)xyz>
Cc: Andres Freund <andres(at)anarazel(dot)de>, "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>, Robert Haas <robertmhaas(at)gmail(dot)com>, "Schneider, Jeremy" <schnjere(at)amazon(dot)com>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>, "Albin, Lloyd P" <lalbin(at)scharp(dot)org>
Subject: Re: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack
Date: 2018-07-26 23:14:31
Message-ID: 3D4F2733-92AE-4B74-8912-3C611B027721@amazon.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

On 7/26/18, 3:42 PM, "Michael Paquier" <michael(at)paquier(dot)xyz> wrote:
> Thanks for the lookup. 0003 is the most simple in the set by the way.

Minus a possible documentation update, 0003 seems almost ready, too.

For 0002, would adding vacuum_skip_rel() before and after
try_relation_open() in vacuum_rel() be enough? That way, we could
avoid emitting an ERROR for only the VACUUM FULL case (and skip it
with a WARNING like everything else).

Nathan

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2018-07-26 23:48:36 Re: BUG #15300: "do you want the application "postgres" to accept incoming network connections" dialog box madness
Previous Message Soni M 2018-07-26 22:09:15 Re: BUG #15301: Scanning all partition when more than 100 items in "where id in ()" clause

Browse pgsql-hackers by date

  From Date Subject
Next Message Michael Paquier 2018-07-26 23:51:58 Re: pgbench: improve --help and --version parsing
Previous Message Fabien COELHO 2018-07-26 22:42:02 Re: pgbench: improve --help and --version parsing