From: | "Quiroga, Damian" <damian(dot)quiroga(at)intel(dot)com> |
---|---|
To: | Jerry Sievers <gsievers19(at)comcast(dot)net>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "pgsql-general(at)postgresql(dot)org" <pgsql-general(at)postgresql(dot)org> |
Subject: | Re: Hiding name and version |
Date: | 2015-09-18 02:25:20 |
Message-ID: | 5F6634B7560CA34EA814093D8CDACAC736F8D7C1@fmsmsx107.amr.corp.intel.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-general |
Good to know.
Thanks everyone.
-----Original Message-----
From: Jerry Sievers [mailto:gsievers19(at)comcast(dot)net]
Sent: Thursday, September 17, 2015 11:03 PM
To: Tom Lane
Cc: Joshua D. Drake; Quiroga, Damian; pgsql-general(at)postgresql(dot)org
Subject: Re: [GENERAL] Hiding name and version
Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> writes:
> "Joshua D. Drake" <jd(at)commandprompt(dot)com> writes:
>
>> On 09/17/2015 10:32 AM, Quiroga, Damian wrote:
>>> Is it possible to prevent users from running the "version" function
>>> or all system information functions? If so, how?
>
>> You could probably revoke access to the function(s) (I haven't tried
>> it because it seems very silly).
>
> I believe revoking public execute access would work, but I concur that
> this specific request seems entirely pointless. Anyone with SQL-level
> access to the server, and a copy of the release notes, can soon
> determine what version they are talking to by testing for the presence
> or absence of assorted features and bugs.
>
> Keep in mind also that pg_dump or pg_upgrade would not preserve such
> alterations to system functions.
And let's not forget...
show server_version or server_version_num;
Oh, and interactive psql without -q prints server version in the banner :-)
>
> regards, tom lane
--
Jerry Sievers
Postgres DBA/Development Consulting
e: postgres(dot)consulting(at)comcast(dot)net
p: 312.241.7800
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2015-09-18 02:29:04 | Re: search_path not reloaded via unix socket connections |
Previous Message | Kong Man | 2015-09-18 02:08:08 | search_path not reloaded via unix socket connections |