Add security definer and search_path to event trigger functions.
commit : d364aa95386113df4d68f80fbe7905c75924dc82
author : David Steele <[email protected]>
date : Thu, 4 Nov 2021 17:29:06 -0400
committer: David Steele <[email protected]>
date : Thu, 4 Nov 2021 17:29:06 -0400
Similar to #156, this prevents users from defining their own versions of functions used in the event triggers. Either one should be sufficient on its own, but both provides better defense against regressions.
M Makefile
A pgaudit–1.0.8–1.0.9.sql
R083 pgaudit–1.0.8.sql pgaudit–1.0.9.sql
M pgaudit.control
Guard against search-path based attacks.
commit : 94309f2c86f68bf27c6b865a6586b69b5984b340
author : Sergey Shinderuk <[email protected]>
date : Thu, 4 Nov 2021 11:48:28 -0400
committer: David Steele <[email protected]>
date : Thu, 4 Nov 2021 11:48:28 -0400
Use qualified references to functions and operators in the SQL queries executed by the event triggers to prevent users from defining their own functions or operators to replace them.
M expected/pgaudit.out
M pgaudit.c
M sql/pgaudit.sql
Add automated testing using Github Actions.
commit : e6b7eaec60d79523fee2edfd7a980614210b9b0e
author : David Steele <[email protected]>
date : Thu, 5 Aug 2021 09:16:47 -0400
committer: David Steele <[email protected]>
date : Thu, 5 Aug 2021 09:16:47 -0400
A Debian Dockerfile is provided so also remove the Vagrantfile.
No RHEL Dockerfile is provided since 9.5 is EOL and no longer present in the default PGDG repo.
A .github/workflows/test.yml
M .gitignore
M README.md
A test/Dockerfile.debian
A test/README.md
D test/Vagrantfile
A test/test.sh
Add .editorconfig.
commit : 5d077c0c2ac4dea9b985f8be47933e09f72aa7b1
author : David Steele <[email protected]>
date : Fri, 11 Jun 2021 11:06:48 -0400
committer: David Steele <[email protected]>
date : Fri, 11 Jun 2021 11:06:48 -0400
A .editorconfig
Update copyright end year.
commit : 2a4c30cc3716ab2a7e1cd66195d3c33937250a40
author : David Steele <[email protected]>
date : Tue, 12 Jan 2021 09:13:54 -0500
committer: David Steele <[email protected]>
date : Tue, 12 Jan 2021 09:13:54 -0500
M pgaudit.c
Improve compile and install instructions.
commit : 51edff23572abbd03910c30aa83a4f9ab5a81ea8
author : David Steele <[email protected]>
date : Tue, 12 Jan 2021 09:01:44 -0500
committer: David Steele <[email protected]>
date : Tue, 12 Jan 2021 09:01:44 -0500
Removing make check suggested by @motte.
Adding PG_CONFIG to make suggested by @vkhvorostianyi.
M README.md