Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-26 Thread Tom Lane
Bruce Momjian <[EMAIL PROTECTED]> writes: > I believe the proper way to handle this is a new directory under /tmp. It's definitely not worth the trouble. I looked at what configure does to make /tmp subdirectories portably, and it is spectacularly ugly (not to mention long). If make_oidjoins_ch

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-26 Thread Bruce Momjian
Tom Lane wrote: > Neil Conway <[EMAIL PROTECTED]> writes: > > On Wed, 2004-10-20 at 06:18, Rod Taylor wrote: > >> http://secunia.com/advisories/12860/ > > > This seems like a rather inconsequential problem, > > Indeed, since ordinary users have no use for make_oidjoins_check. > It's surely very i

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-20 Thread Andrew Dunstan
Tom Lane wrote: Andrew Dunstan <[EMAIL PROTECTED]> writes: Tom Lane wrote: I suspect that no one on the planet except Bruce and myself have ever actually run this script. Then why don't we just remove it? Problem solved ... Because it's a needed maintenance tool. There isn'

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-20 Thread Tom Lane
Andrew Dunstan <[EMAIL PROTECTED]> writes: > Tom Lane wrote: >> I suspect that no one on the planet >> except Bruce and myself have ever actually run this script. > Then why don't we just remove it? Problem solved ... Because it's a needed maintenance tool. There isn't any particularly good reas

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-20 Thread Andrew Dunstan
Tom Lane wrote: I suspect that no one on the planet except Bruce and myself have ever actually run this script. Then why don't we just remove it? Problem solved ... cheers andrew ---(end of broadcast)--- TIP 7: don't forget to increase your free s

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Alvaro Herrera
On Wed, Oct 20, 2004 at 12:31:11AM -0400, Tom Lane wrote: > Alvaro Herrera <[EMAIL PROTECTED]> writes: > > Better, use mktemp(1). The thread testing script already does it IIRC. > > There are only two uses of mktemp(1) in our source tree: configure and > config.guess. Both were gotten from elsew

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Tom Lane
Alvaro Herrera <[EMAIL PROTECTED]> writes: > Better, use mktemp(1). The thread testing script already does it IIRC. There are only two uses of mktemp(1) in our source tree: configure and config.guess. Both were gotten from elsewhere, and both jump through some seriously unreadable hoops in order

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Tom Lane
Neil Conway <[EMAIL PROTECTED]> writes: > On Wed, 2004-10-20 at 06:18, Rod Taylor wrote: >> http://secunia.com/advisories/12860/ > This seems like a rather inconsequential problem, Indeed, since ordinary users have no use for make_oidjoins_check. It's surely very implausible that anyone would run

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Alvaro Herrera
On Wed, Oct 20, 2004 at 12:52:57PM +1000, Neil Conway wrote: > On Wed, 2004-10-20 at 06:18, Rod Taylor wrote: > > http://secunia.com/advisories/12860/ > > This seems like a rather inconsequential problem, but it should be > fixed. The first two ideas that come to mind: use temporary files in > $PW

Re: [HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Neil Conway
On Wed, 2004-10-20 at 06:18, Rod Taylor wrote: > http://secunia.com/advisories/12860/ This seems like a rather inconsequential problem, but it should be fixed. The first two ideas that come to mind: use temporary files in $PWD rather than /tmp, or create a subdirectory in /tmp to use for the tempo

[HACKERS] Possible make_oidjoins_check Security Issue

2004-10-19 Thread Rod Taylor
http://secunia.com/advisories/12860/ ---(end of broadcast)--- TIP 7: don't forget to increase your free space map settings