Re: pg_upgrade should truncate/remove its logs before running

On Wed, Jan 19, 2022 at 09:59:14PM -0600, Justin Pryzby wrote:
> We require that the dir not exist, by testing if (mkdir()).
> So it's okay if someone specifies ../whatever or $CWD.

What I am scared of here is the use of rmtree() if we allow something
like that.  So we should either keep the removal code in its original
shape and allow such cases, or restrict the output path.  At the end,
something has to change.  My points are in favor of the latter because
I don't really see anybody doing the former.  You favor the former.
Now, we are not talking about a lot of code for any of these, anyway.
Perhaps we'd better wait for more opinions.
--
Michael