Do not allow removal of superuser privileges from bootstrap user.
Robert Haas <rhaas@postgresql.org>
Do not allow removal of superuser privileges from bootstrap user. A bootstrap user who is not a superuser will still own many important system objects, such as the pg_catalog schema, that will likely allow that user to regain superuser status. Therefore, allowing the superuser property to be removed from the superuser creates a false perception of security where none exists. Although removing superuser from the bootstrap user is also a bad idea and should be considered unsupported in all released versions, no back-patch, as this is a behavior change. Discussion: http://postgr.es/m/CA+TgmoZirCwArJms_fgvLBFrC6b=HdxmG7iAhv+kt_=NBA7tEw@mail.gmail.com
Files
| Path | Change | +/− |
|---|---|---|
| src/backend/commands/user.c | modified | +8 −1 |
Discussion
- let's disallow ALTER ROLE bootstrap_superuser NOSUPERUSER 12 messages · 2022-07-21 → 2022-07-26