pgAudit 1.5.1 commit log

Add security definer and search_path to event trigger functions.

commit   : 438fc93907bbd1c7c96d5acdd8a5a6307266cdfc    
  
author   : David Steele <[email protected]>    
date     : Thu, 4 Nov 2021 16:56:42 -0400    
  
committer: David Steele <[email protected]>    
date     : Thu, 4 Nov 2021 16:56:42 -0400    

Click here for diff

Similar to #156, this prevents users from defining their own versions of functions used in the event triggers. Either one should be sufficient on its own, but both provides better defense against regressions.  

M Makefile
A pgaudit–1.5–1.5.1.sql
R083 pgaudit–1.5.sql pgaudit–1.5.1.sql
M pgaudit.control

Guard against search-path based attacks.

commit   : 1818afbcbd787fd9dca171df47d608f27f39a87f    
  
author   : Sergey Shinderuk <[email protected]>    
date     : Thu, 4 Nov 2021 11:34:01 -0400    
  
committer: David Steele <[email protected]>    
date     : Thu, 4 Nov 2021 11:34:01 -0400    

Click here for diff

Use qualified references to functions and operators in the SQL queries executed by the event triggers to prevent users from defining their own functions or operators to replace them.  

M expected/pgaudit.out
M pgaudit.c
M sql/pgaudit.sql

Fix logic to properly classify SELECT FOR UPDATE as SELECT.

commit   : 25971784df8f2ff2c979d896269b6b8dd845db3b    
  
author   : David Steele <[email protected]>    
date     : Thu, 5 Aug 2021 09:27:05 -0400    
  
committer: David Steele <[email protected]>    
date     : Thu, 5 Aug 2021 09:27:05 -0400    

Click here for diff

This logic was submitted in PR #88 but there was some confusion on my part about what it was supposed to do. Since the title was "Suppress logging for internally generated foreign-key queries" I tried to make it do that, and broke SELECT FOR UPDATE logging, which unfortunately had no test.  
  
Reading the PR again, it seems Peter's intention was only to correctly classify SELECT FOR UPDATE as SELECT. In any case that represents an improvement over what we have, even if it does not suppress logging for internally generated foreign-key queries, at least not in the case of SELECT.  
  
So, revert the logic that suppressed the SELECT FOR UPDATE logging and use Peter's logic that correctly classifies them as SELECT.  
  
Also add a SELECT FOR UPDATE test to prevent regressions.  
  
Reported by Sergey Shinderuk (@shinderuk).  
Reviewed by Sergey Shinderuk (@shinderuk), Stephen Frost (@sfrost).  

M expected/pgaudit.out
M pgaudit.c
M sql/pgaudit.sql

Add automated testing using Github Actions.

commit   : 2afacadbf7e2d9a08ee6ec6f7bec8cc92d1fcc00    
  
author   : David Steele <[email protected]>    
date     : Thu, 5 Aug 2021 08:25:32 -0400    
  
committer: David Steele <[email protected]>    
date     : Thu, 5 Aug 2021 08:25:32 -0400    

Click here for diff

Both Debian and RHEL Dockerfiles are provided so also remove the Vagrantfile.  

A .github/workflows/test.yml
M .gitignore
M README.md
A test/Dockerfile.debian
A test/Dockerfile.rhel
A test/README.md
D test/Vagrantfile
A test/test.sh

Add .editorconfig.

commit   : 714851b11abba626758cfb65a1e9098a6690f88e    
  
author   : David Steele <[email protected]>    
date     : Fri, 11 Jun 2021 11:06:48 -0400    
  
committer: David Steele <[email protected]>    
date     : Fri, 11 Jun 2021 11:06:48 -0400    

Click here for diff

A .editorconfig

commit   : 0bdaf5dcd8288306dcfcf03cff4ccf1f51908d46    
  
author   : David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 09:11:37 -0500    
  
committer: David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 09:11:37 -0500    

Click here for diff

M pgaudit.c

Remove PostgreSQL 13 repository used for pre-release testing.

commit   : f37c26ade9d988b94dedc8a2de6d852156a4c43a    
  
author   : David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 09:05:40 -0500    
  
committer: David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 09:05:40 -0500    

Click here for diff

M test/Vagrantfile

Improve compile and install instructions.

commit   : 171db823cc13cbf70a89ce35522912b331dfd9ee    
  
author   : David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 08:57:20 -0500    
  
committer: David Steele <[email protected]>    
date     : Tue, 12 Jan 2021 08:57:20 -0500    

Click here for diff

Removing make check suggested by @motte.  
Adding PG_CONFIG to make suggested by @vkhvorostianyi.  

M README.md