NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commitd924944

committed

Mark ssl_passphrase_command as GUC_SUPERUSER_ONLY.

This commit changes the GUC ssl_passphrase_command so thatit's examinable by only superuser and a member of pg_read_all_settings.Per discussion, we determined to do this because the parameter maycontain a sensitive informtaion like a passphrase itself.Author: Insung MoonReviewed-by: Keisuke KurodaDiscussion:https://postgr.es/m/CAEMmqBuHVGayc+QkYKgx3gWSdqwTAQGw+0DYn3WhcX-eNa2ntA@mail.gmail.com

1 parent5aaa584 commitd924944Copy full SHA for d924944

File tree

1 file changed

-1

lines changed

src/backend/utils/misc
- guc.c

1 file changed

-1

lines changed

`‎src/backend/utils/misc/guc.c`

Lines changed: 2 additions & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -4268,7 +4268,8 @@ static struct config_string ConfigureNamesString[] =`
`4268`	`4268`	`{`
`4269`	`4269`	`{"ssl_passphrase_command",PGC_SIGHUP,CONN_AUTH_SSL,`
`4270`	`4270`	`gettext_noop("Command to obtain passphrases for SSL."),`
`4271`		`-NULL`
	`4271`	`+NULL,`
	`4272`	`+GUC_SUPERUSER_ONLY`
`4272`	`4273`	`},`
`4273`	`4274`	`&ssl_passphrase_command,`
`4274`	`4275`	`"",`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commitd924944

File tree

1 file changed

1 file changed

`‎src/backend/utils/misc/guc.c`

0 commit comments