When will trusted PL/Python be supported?

Started by Bowen Shialmost 3 years ago5 messagesgeneral
Jump to latest
#1Bowen Shi
zxwsbg12138@gmail.com

Dears,

It seems to me that we have untrusted PL/Python for a long time, but
till now we still do not support trusted plpython.

I'd like to know is supporting trusted PL/Python still in the
schedule? What is the reason for the current lack of support, and do
we have any relevant email discussion?

Regards
Bowen Shi

#2Karsten Hilbert
Karsten.Hilbert@gmx.net
In reply to: Bowen Shi (#1)
Aw: When will trusted PL/Python be supported?

It seems to me that we have untrusted PL/Python for a long time, but
till now we still do not support trusted plpython.

I'd like to know is supporting trusted PL/Python still in the
schedule? What is the reason for the current lack of support, and do
we have any relevant email discussion?

AFAIR the consensus was that Python cannot really be (made to be) trusted
in the PG sense which is why plpython/trusted was *removed*.

Karsten

#3Adrian Klaver
adrian.klaver@aklaver.com
In reply to: Bowen Shi (#1)
Re: When will trusted PL/Python be supported?

On 6/27/23 04:46, Bowen Shi wrote:

Dears,

It seems to me that we have untrusted PL/Python for a long time, but
till now we still do not support trusted plpython.

I'd like to know is supporting trusted PL/Python still in the
schedule? What is the reason for the current lack of support, and do
we have any relevant email discussion?

https://www.postgresql.org/docs/7.4/release-7-4.html

Release date: 2003-11-17

...

"
Make PL/Python an untr"usted language, now called plpythonu (Kevin
Jacobs, Tom)

The Python language no longer supports a restricted execution
environment, so the trusted version of PL/Python was removed. If this
situation changes, a version of PL/Python that can be used by
non-superusers will be readded.
"

The situation has not changed.

Regards
Bowen Shi

--
Adrian Klaver
adrian.klaver@aklaver.com

#4Tom Lane
tgl@sss.pgh.pa.us
In reply to: Adrian Klaver (#3)
Re: When will trusted PL/Python be supported?

Adrian Klaver <adrian.klaver@aklaver.com> writes:

On 6/27/23 04:46, Bowen Shi wrote:

I'd like to know is supporting trusted PL/Python still in the
schedule? What is the reason for the current lack of support, and do
we have any relevant email discussion?

/messages/by-id/20030525224833.GO31407@tummy.com

/messages/by-id/Pine.LNX.4.44.0306182125590.17051-100000@penguin.theopalgroup.com

There's been a little bit of discussion of using RestrictedPython:

/messages/by-id/9d1f8d830808041008v50104fd8p6181d5ddce85a6a@mail.gmail.com

but it doesn't seem to have gone anywhere.

regards, tom lane

#5Jeffrey Walton
noloader@gmail.com
In reply to: Tom Lane (#4)
Re: When will trusted PL/Python be supported?

On Tue, Jun 27, 2023 at 12:17 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:

Adrian Klaver <adrian.klaver@aklaver.com> writes:

On 6/27/23 04:46, Bowen Shi wrote:

I'd like to know is supporting trusted PL/Python still in the
schedule? What is the reason for the current lack of support, and do
we have any relevant email discussion?

/messages/by-id/20030525224833.GO31407@tummy.com

/messages/by-id/Pine.LNX.4.44.0306182125590.17051-100000@penguin.theopalgroup.com

There's been a little bit of discussion of using RestrictedPython:

/messages/by-id/9d1f8d830808041008v50104fd8p6181d5ddce85a6a@mail.gmail.com

but it doesn't seem to have gone anywhere.

Off-topic, but I am amazed folks like Tom and Adrian remember those
conversations and can actually find them in the archives.

Jeff