postgresql

mirror of https://git.postgresql.org/git/postgresql.git synced 2024-09-30 15:01:15 +02:00

Go to file

Tom Lane a926eb84e0 Ensure that all temp files made during pg_upgrade are non-world-readable. pg_upgrade has always attempted to ensure that the transient dump files it creates are inaccessible except to the owner. However, refactoring in commit `76a7650c4` broke that for the file containing "pg_dumpall -g" output; since then, that file was protected according to the process's default umask. Since that file may contain role passwords (hopefully encrypted, but passwords nonetheless), this is a particularly unfortunate oversight. Prudent users of pg_upgrade on multiuser systems would probably run it under a umask tight enough that the issue is moot, but perhaps some users are depending only on pg_upgrade's umask changes to protect their data. To fix this in a future-proof way, let's just tighten the umask at process start. There are no files pg_upgrade needs to write at a weaker security level; and if there were, transiently relaxing the umask around where they're created would be a safer approach. Report and patch by Tom Lane; the idea for the fix is due to Noah Misch. Back-patch to all supported branches. Security: CVE-2018-1053		2018-02-05 10:58:27 -05:00
config	Extend configure's __int128 test to check for a known gcc bug.	2018-01-18 11:09:44 -05:00
contrib	Support parallel btree index builds.	2018-02-02 13:32:44 -05:00
doc	doc: Update mentions of MD5 in the documentation	2018-02-04 16:38:08 -05:00
src	Ensure that all temp files made during pg_upgrade are non-world-readable.	2018-02-05 10:58:27 -05:00
.dir-locals.el	emacs: Set indent-tabs-mode in perl-mode	2015-04-12 23:53:23 -04:00
.gitattributes	Remove contrib/tsearch2.	2017-02-13 11:06:11 -05:00
.gitignore	Add lcov --initial	2017-09-29 08:54:34 -04:00
aclocal.m4	Make configure check for IPC::Run when --enable-tap-tests is specified.	2017-06-15 15:56:12 -04:00
configure	Extend configure's __int128 test to check for a known gcc bug.	2018-01-18 11:09:44 -05:00
configure.in	Another attempt at fixing build with various OpenSSL versions	2018-01-04 19:09:27 -05:00
COPYRIGHT	Update copyright for 2018	2018-01-02 23:30:12 -05:00
GNUmakefile.in	Have "make coverage" recurse into contrib as well	2016-09-05 18:44:36 -03:00
HISTORY	Change documentation references to PG website to use https: not http:	2017-05-20 21:50:47 -04:00
Makefile	Fix non-GNU makefiles for AIX make.	2017-11-30 00:57:22 -08:00
README	Change documentation references to PG website to use https: not http:	2017-05-20 21:50:47 -04:00
README.git	Change documentation references to PG website to use https: not http:	2017-05-20 21:50:47 -04:00

README

PostgreSQL Database Management System
=====================================

This directory contains the source code distribution of the PostgreSQL
database management system.

PostgreSQL is an advanced object-relational database management system
that supports an extended subset of the SQL standard, including
transactions, foreign keys, subqueries, triggers, user-defined types
and functions.  This distribution also contains C language bindings.

PostgreSQL has many language interfaces, many of which are listed here:

	https://www.postgresql.org/download

See the file INSTALL for instructions on how to build and install
PostgreSQL.  That file also lists supported operating systems and
hardware platforms and contains information regarding any other
software packages that are required to build or run the PostgreSQL
system.  Copyright and license information can be found in the
file COPYRIGHT.  A comprehensive documentation set is included in this
distribution; it can be read as described in the installation
instructions.

The latest version of this software may be obtained at
https://www.postgresql.org/download/.  For more information look at our
web site located at https://www.postgresql.org/.