]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Lock down regression testing temporary clusters on Windows.
authorNoah Misch <noah@leadboat.com>
Thu, 18 Dec 2014 03:48:40 +0000 (22:48 -0500)
committerNoah Misch <noah@leadboat.com>
Thu, 18 Dec 2014 03:48:47 +0000 (22:48 -0500)
commit0046f651da3ef0b73c3e16672e1198607c2d2ce5
tree44192482ad822396a0d0bf09ef33cbfd8cadd76a
parentd1131ae50350f971dbc28502d5f4e141d41d9c8e
Lock down regression testing temporary clusters on Windows.

Use SSPI authentication to allow connections exclusively from the OS
user that launched the test suite.  This closes on Windows the
vulnerability that commit be76a6d39e2832d4b88c0e1cc381aa44a7f86881
closed on other platforms.  Users of "make installcheck" or custom test
harnesses can run "pg_regress --config-auth=DATADIR" to activate the
same authentication configuration that "make check" would use.
Back-patch to 9.0 (all supported versions).

Security: CVE-2014-0067
contrib/dblink/Makefile
contrib/dblink/expected/dblink.out
contrib/dblink/sql/dblink.sql
contrib/pg_upgrade/test.sh
doc/src/sgml/regress.sgml
src/test/regress/pg_regress.c
src/tools/msvc/vcregress.pl