Add security definer and search_path to event trigger functions.
commit : a85f82cb902942a68528b02da0946c8642536806
author : David Steele <david@pgmasters.net>
date : Thu, 4 Nov 2021 17:02:13 -0400
committer: David Steele <david@pgmasters.net>
date : Thu, 4 Nov 2021 17:02:13 -0400
Similar to #156, this prevents users from defining their own versions of functions used in the event triggers. Either one should be sufficient on its own, but both provides better defense against regressions.
M Makefile
A pgaudit–1.4.1–1.4.2.sql
R083 pgaudit–1.4.1.sql pgaudit–1.4.2.sql
M pgaudit.control
Guard against search-path based attacks.
commit : c5012937ea7dea5ed01b3b81897f29fb8f6ab565
author : Sergey Shinderuk <sshinderuk@gmail.com>
date : Thu, 4 Nov 2021 11:36:32 -0400
committer: David Steele <david@pgmasters.net>
date : Thu, 4 Nov 2021 11:36:32 -0400
Use qualified references to functions and operators in the SQL queries executed by the event triggers to prevent users from defining their own functions or operators to replace them.
M expected/pgaudit.out
M pgaudit.c
M sql/pgaudit.sql
Add automated testing using Github Actions.
commit : 7761311d7061c4c069cce6e77899016ce654d715
author : David Steele <david@pgmasters.net>
date : Thu, 5 Aug 2021 08:39:57 -0400
committer: David Steele <david@pgmasters.net>
date : Thu, 5 Aug 2021 08:39:57 -0400
Both Debian and RHEL Dockerfiles are provided so also remove the Vagrantfile.
A .github/workflows/test.yml
M .gitignore
M README.md
A test/Dockerfile.debian
A test/Dockerfile.rhel
A test/README.md
D test/Vagrantfile
A test/test.sh
Add .editorconfig.
commit : 1f82d9af676af8781228be0110be67247ec4b651
author : David Steele <david@pgmasters.net>
date : Fri, 11 Jun 2021 11:06:48 -0400
committer: David Steele <david@pgmasters.net>
date : Fri, 11 Jun 2021 11:06:48 -0400
A .editorconfig
Update copyright end year.
commit : a56e42cb3c6601c90dce45bbf5fd8535cd0866dc
author : David Steele <david@pgmasters.net>
date : Tue, 12 Jan 2021 09:11:59 -0500
committer: David Steele <david@pgmasters.net>
date : Tue, 12 Jan 2021 09:11:59 -0500
M pgaudit.c
Improve compile and install instructions.
commit : 0fcf4fc3f561e49ee90f8b0687e304e7ee1d0264
author : David Steele <david@pgmasters.net>
date : Tue, 12 Jan 2021 08:58:13 -0500
committer: David Steele <david@pgmasters.net>
date : Tue, 12 Jan 2021 08:58:13 -0500
Removing make check suggested by @motte.
Adding PG_CONFIG to make suggested by @vkhvorostianyi.
M README.md