Re: EMBEDDED PostgreSQL

From: John DeSoi <desoi(at)pgedit(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: Postgres help (E-mail) <pgsql-general(at)postgresql(dot)org>
Subject: Re: EMBEDDED PostgreSQL
Date: 2005-01-25 23:38:46
Message-ID: 41F1F8D7-6F2A-11D9-BDFB-000A95B03262@pgedit.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi Tom,

On Jan 25, 2005, at 4:35 PM, Tom Lane wrote:

> Sorry, but any Windows user who thinks he doesn't need security
> measures
> equivalent to (not "beyond") minimum Unix practice is a dummy about
> security. Take a look at this LOAD vulnerability we're in the midst of
> patching, and ask yourself whether you aren't glad that it can't be
> used
> to get admin privileges on your Windows box.

So a vulnerability exists on Windows even if PostgreSQL is only
accepting local connections?

The poster asked about embedded databases and that is what I'm trying
to address. I realize this has been thoroughly hashed about in the
archives, but I don't recall any discussion of PotgreSQL 8 on Windows.

Thanks,

John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL

In response to

Browse pgsql-general by date

  From Date Subject
Next Message John Gray 2005-01-25 23:48:46 Re: xpath_list() question for contrib/xml2
Previous Message Jim C. Nasby 2005-01-25 23:35:02 Re: How are foreign key constraints built?