NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commitecd5d24

committed

Set GUC "is_superuser" in all processes that set AuthenticatedUserId.

It was always false in single-user mode, in autovacuum workers, and inbackground workers. This had no specifically-identified securityconsequences, but non-core code or future work might make itsecurity-relevant. Back-patch to v11 (all supported versions).Jelte Fennema-Nio. Reported by Jelte Fennema-Nio.

1 parent508acb9 commitecd5d24Copy full SHA for ecd5d24

File tree

1 file changed

-0

lines changed

src/backend/utils/init
- miscinit.c

1 file changed

-0

lines changed

`‎src/backend/utils/init/miscinit.c`

Lines changed: 8 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -797,6 +797,14 @@ InitializeSessionUserIdStandalone(void)`
`797`	`797`	`AuthenticatedUserIsSuperuser= true;`
`798`	`798`
`799`	`799`	`SetSessionUserId(BOOTSTRAP_SUPERUSERID, true);`
	`800`	`+`
	`801`	`+/*`
	`802`	`+ * XXX This should set SetConfigOption("session_authorization"), too.`
	`803`	`+ * Since we don't, C code will get NULL, and current_setting() will get an`
	`804`	`+ * empty string.`
	`805`	`+ */`
	`806`	`+SetConfigOption("is_superuser","on",`
	`807`	`+PGC_INTERNAL,PGC_S_DYNAMIC_DEFAULT);`
`800`	`808`	`}`
`801`	`809`
`802`	`810`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commitecd5d24

File tree

1 file changed

1 file changed

`‎src/backend/utils/init/miscinit.c`

0 commit comments