database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-09-02 04:21:28 +03:00
Code Activity

Prevent non-superusers from reading pg_backend_memory_contexts, by default.

Browse Source 
pg_backend_memory_contexts view contains some internal information of
memory contexts. Since exposing them to any users by default may cause
security issue, this commit allows only superusers to read this view,
by default, like we do for pg_shmem_allocations view.

Bump catalog version.

Author: Atsushi Torikoshi
Reviewed-by: Michael Paquier, Fujii Masao
Discussion: https://postgr.es/m/1414992.1597849297@sss.pgh.pa.us
This commit is contained in:
Fujii Masao
2020-08-26 10:50:02 +09:00
parent c34605daed
commit 29dd6d8bc6
3 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
doc/src/sgml/catalogs.sgml
View File

@@ -9697,6 +9697,10 @@ SCRAM-SHA-256$<replaceable>&lt;iteration count&gt;</replaceable>:<replaceable>&l
</tgroup>
</table>
<para>
By default, the <structname>pg_backend_memory_contexts</structname> view can be
read only by superusers.
</para>
</sect1>
<sect1 id="view-pg-config">