Re: [HACKERS] DDL Damage Assessment

2014-10-02 Thread Harold Giménez
I think the main issue is when a table rewrite is triggered on a DDL command on a large table, as this is what frequently leads to unavailability. The idea of introducing a NOREWRITE keyword to DDL commands then came up (credit: Peter Geoghegan). When the NOREWRITE keyword is used and the DDL state

Re: [HACKERS] proposal: hide application_name from other users

2014-01-24 Thread Harold Giménez
On Fri, Jan 24, 2014 at 6:46 AM, Magnus Hagander wrote: > > On Thu, Jan 23, 2014 at 2:01 AM, Greg Stark wrote: >> >> On Wed, Jan 22, 2014 at 1:03 PM, Josh Berkus wrote: >> > Probably Heroku has some more specific exploit case to be concerned >> > about here; if so, might I suggest taking it up w

Re: [HACKERS] Why do we let autovacuum give up?

2014-01-23 Thread Harold Giménez
On Thu, Jan 23, 2014 at 12:53 PM, Josh Berkus wrote: > On 01/23/2014 12:34 PM, Joshua D. Drake wrote: >> >> Hello, >> >> I have run into yet again another situation where there was an >> assumption that autovacuum was keeping up and it wasn't. It was caused >> by autovacuum quitting because anothe

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 5:22 PM, Mark Kirkwood wrote: > On 22/01/14 13:32, Harold Giménez wrote: >> >> On Tue, Jan 21, 2014 at 4:19 PM, Bruce Momjian wrote: >>> >>> On Tue, Jan 21, 2014 at 04:06:46PM -0800, Harold Giménez wrote: >>>> >>>&

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 4:53 PM, Josh Berkus wrote: > It would be really nice to be able to GRANT/REVOKE on some of these > special system views ... I think this would be ideal, too. -Harold -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscrip

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 4:46 PM, Stephen Frost wrote: > * Harold Giménez (har...@heroku.com) wrote: >> This is a separate topic, but in such a case I'd want to know that >> I've reached max_connections, which may not be a problem if I just >> don't need an

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 4:38 PM, Stephen Frost wrote: > * Harold Giménez (har...@heroku.com) wrote: >> Definitely agree with you. This is just an example of how running >> monitoring as superuser is not necessarily the worst thing, and there >> are other reasons to do i

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 4:19 PM, Bruce Momjian wrote: > On Tue, Jan 21, 2014 at 04:06:46PM -0800, Harold Giménez wrote: >> I don't know of a client where it can't be overridden. The friction >> occurs when by default it sets it to something useful to a developer &g

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 4:01 PM, Bruce Momjian wrote: > On Tue, Jan 21, 2014 at 03:57:37PM -0800, Harold Giménez wrote: >> > It also means that monitoring tools must run as superuser to see >> > information they require, which to me is a total showstopper. >> >>

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 7:25 AM, Tom Lane wrote: > Stephen Frost writes: >> * Craig Ringer (cr...@2ndquadrant.com) wrote: >>> If you want control over visibility of application_name, it should be >>> done with a column privilige granted to a system role, or something like >>> that - so the abilit

Re: [HACKERS] proposal: hide application_name from other users

2014-01-21 Thread Harold Giménez
On Tue, Jan 21, 2014 at 12:31 AM, Craig Ringer wrote: > > On 01/21/2014 04:19 PM, Heikki Linnakangas wrote: > > On 01/21/2014 07:22 AM, Harold Giménez wrote: > >> First of all, I apologize for submitting a patch and missing the > >> commitfest > >> deadline.

[HACKERS] proposal: hide application_name from other users

2014-01-20 Thread Harold Giménez
environment is more information than an attacker should have access to on services like Heroku and other similar providers. Thanks and regards, -Harold Giménez [1] http://www.postgresql.org/message-id/14808.1259452...@sss.pgh.pa.us [2] http://git.postgresql.org/gitweb/?p=postgresql

Re: [HACKERS] Changing pg_dump default file format

2013-11-08 Thread Harold Giménez
I don't want to hijack this thread any further, but Craig, thanks for your insight. -Harold On Thu, Nov 7, 2013 at 8:35 PM, Craig Ringer wrote: > On 11/08/2013 11:41 AM, Harold Giménez wrote: > > > > > > > > On Thu, Nov 7, 2013 at 7:01 PM, Craig Ringer > &l

Re: [HACKERS] Changing pg_dump default file format

2013-11-07 Thread Harold Giménez
On Thu, Nov 7, 2013 at 7:01 PM, Craig Ringer wrote: > > (a) Lots of people only upgrade every two, three, or even more major > versions. I'm dealing with clients on 8.3, and people still pop up on > Stack Overflow with 8.1 sometimes! These people don't ever see the > deprecated phase. > Interest

Re: [HACKERS] Changing pg_dump default file format

2013-11-07 Thread Harold Giménez
On Thu, Nov 7, 2013 at 8:26 AM, Tom Lane wrote: > Magnus Hagander writes: > > On Thu, Nov 7, 2013 at 5:02 PM, Joshua D. Drake > wrote: > >> I humbly request on behalf of those who manage production postgresql > >> instances that we change the default backup file format from -Fp to -Fc. > > > I'

Re: [HACKERS] Redesigning checkpoint_segments

2013-06-05 Thread Harold Giménez
Hi, On Wed, Jun 5, 2013 at 11:05 PM, Joshua D. Drake wrote: > > On 6/5/2013 10:54 PM, Peter Geoghegan wrote: > >> On Wed, Jun 5, 2013 at 10:27 PM, Joshua D. Drake >> wrote: > > > Instead of "running out of disk space PANIC" we should just write to an > emergency location within PGDATA This mer

Re: [HACKERS] pg_upgrade improvements

2012-04-11 Thread Harold Giménez
On Wed, Apr 11, 2012 at 5:40 PM, Bruce Momjian wrote: > On Wed, Apr 04, 2012 at 07:26:58PM -0700, Harold Giménez wrote: > > There could be incoming connections for a number of > > reasons: either the user or the user's applications are reestablishing > > connections,

[HACKERS] pg_upgrade improvements

2012-04-04 Thread Harold Giménez
Hi all, I've written a pg_upgrade wrapper for upgrading our users (heroku) to postgres 9.1. In the process I encountered a specific issue that could easily be improved. We've had this process work consistently for many users both internal and external, with the exception of just a few for whom the

[HACKERS] Reviewing patch "URI connection string support for libpq"

2012-02-23 Thread Harold Giménez
Hello hackers, I've been a reader of this list for some time, but have never posted. I have interest in the URI connection string support patch[1], so I'm in the process of reviewing it. I have a couple of comments and questions: 1. I see no tests in the patch. I'd like to start getting together