On Mon, May 23, 2022 at 01:17:08PM -0400, Tom Lane wrote: > There would probably be some interest in a "--disable-disk-access" > configure option that did all of this stuff (and some more things > too), with the aim of locking down *all* known paths to filesystem > access. I don't see much value in retail options that do some of that. > In fact, what they might mostly accomplish is to give people a false > sense of security.
That's a reasonable point. I'll go ahead an explore some options for something along those lines. A couple of questions immediately come to mind. For example, should this configuration option just cause these functions to ERROR, or should it compile them out? -- Nathan Bossart Amazon Web Services: https://aws.amazon.com
