Hi all
I reviewed and tested the v1 patch for allowing bare library names for
non-superuser LOAD.
I was able to reproduce the existing behavior before applying the patch:
-As a non-superuser, LOAD mylib failed with access to library mylib is
not allowed.
-LOAD $libdir/plugins/mylib succeeded.

After applying the v1 patch and rebuilding/restarting PostgreSQL:
-LOAD mylib succeeded and loaded the library from $libdir/plugins.
-LOAD $libdir/plugins/mylib continued to work.
-Attempts to load /tmp/mylib.so, $libdir/mylib, and ../mylib were
still rejected for the non-superuser.
I also ran git diff --check, which completed without any errors.

>From my testing, the patch fixes the reported issue while preserving
the existing security restriction for non-superuser LOAD.
I did not find any functional issue with the patch during these tests.

Regards
solai


Reply via email to