Re: Safe security
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Tim Bunce <Tim.Bunce@pobox.com>
Cc: Andrew Dunstan <andrew@dunslane.net>, jd@commandprompt.com, PostgreSQL-development <pgsql-hackers@postgresql.org>
Date: 2010-03-08T16:03:27Z
Lists: pgsql-hackers
Tim Bunce <Tim.Bunce@pobox.com> writes: > Here's a patch that: > 1. adds wording like that to the docs. > 2. randomises the container package name (a simple and sound security measure). > 3. requires Safe 2.25 (which has assorted fixes, including security). > 4. removed a harmless but suprious exclamation mark from the source. #3 is still an absolute nonstarter, especially for a patch that we'd wish to backpatch. regards, tom lane