Because rexec was considered so broken by Guido that it was removed in its entirety. Hopefully some day it will be readded in a more secure form, and then the plpython module can be reinstated as a trusted language.
On Thu, 26 Jun 2003, DeJuan Jackson wrote: > Just wondering (I don't use or intend to use plpython), but why does it > need to be marked untrusted is the rexec code has been corrected. > > Bruce Momjian wrote: > > >Patch applied. Thanks. > > > >--------------------------------------------------------------------------- > > > > > >Kevin Jacobs wrote: > > > > > >>On Wed, 18 Jun 2003, Kevin Jacobs wrote: > >> > >> > >>>I've worked with the Pl/Python code in the past and will see about removing > >>>rexec and making it an untrusted language. Last time I looked, it didn't > >>>look particularly difficult. I've set aside some time next week, so stay > >>>tuned. > >>> > >>> > >>Attached is a patch that removes all of the RExec code from plpython from > >>the current PostgreSQL CVS. In addition, plpython needs to be changed to an > >>untrusted language in createlang. Please let me know if there are any > >>problems. > >> > >>Best regards, > >>-Kevin > >> > >>-- > >>-- > >>Kevin Jacobs > >>The OPAL Group - Enterprise Systems Architect > >>Voice: (216) 986-0710 x 19 E-mail: [EMAIL PROTECTED] > >>Fax: (216) 986-0714 WWW: http://www.theopalgroup.com > >> > >> > > > >Content-Description: > > > >[ Attachment, skipping... ] > > > > > > > >>---------------------------(end of broadcast)--------------------------- > >>TIP 2: you can get off all lists at once with the unregister command > >> (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED]) > >> > >> > > > > > > > > ---------------------------(end of broadcast)--------------------------- TIP 2: you can get off all lists at once with the unregister command (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])
