From d50917df2ddae1821329f1c4ee9a4965f734e474 Mon Sep 17 00:00:00 2001 From: Michael Paquier Date: Mon, 14 Aug 2017 10:57:26 +0900 Subject: [PATCH 1/3] Remove ALLOW_DANGEROUS_LO_FUNCTIONS for LO-related superuser checks This switch dated of 4cd4a54c, which is old and not being used anymore by modern distrubutions bundling PostgreSQL. --- src/backend/libpq/be-fsstubs.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/src/backend/libpq/be-fsstubs.c b/src/backend/libpq/be-fsstubs.c index bf45461b2f..4d75c60979 100644 --- a/src/backend/libpq/be-fsstubs.c +++ b/src/backend/libpq/be-fsstubs.c @@ -448,13 +448,11 @@ lo_import_internal(text *filename, Oid lobjOid) LargeObjectDesc *lobj; Oid oid; -#ifndef ALLOW_DANGEROUS_LO_FUNCTIONS if (!superuser()) ereport(ERROR, (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE), errmsg("must be superuser to use server-side lo_import()"), errhint("Anyone can use the client-side lo_import() provided by libpq."))); -#endif CreateFSContext(); @@ -514,13 +512,11 @@ be_lo_export(PG_FUNCTION_ARGS) LargeObjectDesc *lobj; mode_t oumask; -#ifndef ALLOW_DANGEROUS_LO_FUNCTIONS if (!superuser()) ereport(ERROR, (errcode(ERRCODE_INSUFFICIENT_PRIVILEGE), errmsg("must be superuser to use server-side lo_export()"), errhint("Anyone can use the client-side lo_export() provided by libpq."))); -#endif CreateFSContext(); -- 2.14.1