Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit6973b05

Browse files
committed
Further fix privileges on pg_statistic_ext[_data].
We don't need to restrict column privileges on pg_statistic_ext;all of that data is OK to read publicly. What we *do* need to do,which was overlooked by6cbfb78, is revoke public read access onpg_statistic_ext_data; otherwise we still have the same securityhole we started with.Catversion bump to ensure that installations calling themselvesbeta2 will have this fix.Diagnosis/correction by Dean Rasheed and Tomas Vondra, but I'mgoing to go ahead and push this fix ASAP so we get more buildfarmcycles on it.Discussion:https://postgr.es/m/8833.1560647898@sss.pgh.pa.us
1 parentfc8cf3d commit6973b05

File tree

2 files changed

+3
-4
lines changed

2 files changed

+3
-4
lines changed

‎src/backend/catalog/system_views.sql‎

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -290,9 +290,8 @@ CREATE VIEW pg_stats_ext WITH (security_barrier) AS
290290
WHERE NOT has_column_privilege(c.oid,a.attnum,'select') )
291291
AND (c.relrowsecurity= falseOR NOT row_security_active(c.oid));
292292

293-
REVOKE ALLon pg_statistic_extFROM public;
294-
GRANTSELECT (tableoid,oid, stxrelid, stxname, stxnamespace, stxowner, stxkeys, stxkind)
295-
ON pg_statistic_ext TO public;
293+
-- unprivileged users may read pg_statistic_ext but not pg_statistic_ext_data
294+
REVOKE ALLon pg_statistic_ext_dataFROM public;
296295

297296
CREATEVIEWpg_publication_tablesAS
298297
SELECT

‎src/include/catalog/catversion.h‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,6 @@
5353
*/
5454

5555
/*yyyymmddN */
56-
#defineCATALOG_VERSION_NO201906152
56+
#defineCATALOG_VERSION_NO201906161
5757

5858
#endif

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp