Re: pgsql: postgres_fdw: improve security checks

From: Peter Eisentraut <peter(at)eisentraut(dot)org>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: Re: pgsql: postgres_fdw: improve security checks
Date: 2025-03-26 11:15:48
Message-ID: 92568c98-aff9-4e98-baf3-6794866e39a6@eisentraut.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

On 26.03.25 01:59, Tom Lane wrote:
> Peter Eisentraut <peter(at)eisentraut(dot)org> writes:
>> postgres_fdw: improve security checks
>
> This patch is failing on "drongo" [1]. It looks like the problem
> is that the pg_hba.conf file being used doesn't allow for TCP
> loopback connections.
>
> To make that safe, the test would have to be changed to not run by
> default. We could gate it with a PG_TEST_EXTRA check ... but the
> end result would likely be that it gets run by just about nobody.
> I wonder whether it's worth the trouble.

This has been fixed.

In response to

Browse pgsql-committers by date

  From Date Subject
Next Message Daniel Gustafsson 2025-03-26 12:23:36 pgsql: psql: Make test robust against locale variations
Previous Message Peter Eisentraut 2025-03-26 09:49:48 pgsql: dblink: SCRAM authentication pass-through