On Mon, May 23, 2022 at 01:17:08PM -0400, Tom Lane wrote:
> There would probably be some interest in a "--disable-disk-access"
> configure option that did all of this stuff (and some more things
> too), with the aim of locking down *all* known paths to filesystem
> access. I don't see much value in retail options that do some of that.
> In fact, what they might mostly accomplish is to give people a false
> sense of security.
That's a reasonable point. I'll go ahead an explore some options for
something along those lines. A couple of questions immediately come to
mind. For example, should this configuration option just cause these
functions to ERROR, or should it compile them out?
--
Nathan Bossart
Amazon Web Services: https://aws.amazon.com