Jeff Davis 05e1737351 Fix search_path to a safe value during maintenance operations. ... While executing maintenance operations (ANALYZE, CLUSTER, REFRESH MATERIALIZED VIEW, REINDEX, or VACUUM), set search_path to 'pg_catalog, pg_temp' to prevent inconsistent behavior. Functions that are used for functional indexes, in index expressions, or in materialized views and depend on a different search path must be declared with CREATE FUNCTION ... SET search_path='...'. This change addresses a security risk introduced in commit 60684dd834, where a role with MAINTAIN privileges on a table may be able to escalate privileges to the table owner. That commit is not yet part of any release, so no need to backpatch. Discussion: https://postgr.es/m/e44327179e5c9015c8dda67351c04da552066017.camel%40j-davis.com Reviewed-by: Greg Stark Reviewed-by: Nathan Bossart		2023-06-09 11:20:47 -07:00
..
expected	Remove io prefix from pg_stat_io columns	2023-04-21 07:21:50 +09:00
sql	Remove io prefix from pg_stat_io columns	2023-04-21 07:21:50 +09:00
t	Pre-beta mechanical code beautification.	2023-05-19 17:24:48 -04:00
.gitignore
amcheck--1.0--1.1.sql
amcheck--1.0.sql
amcheck--1.1--1.2.sql
amcheck--1.2--1.3.sql	Extend amcheck to check heap pages.	2020-10-22 08:44:18 -04:00
amcheck.control	Extend amcheck to check heap pages.	2020-10-22 08:44:18 -04:00
Makefile	Extend amcheck to check heap pages.	2020-10-22 08:44:18 -04:00
meson.build	Update copyright for 2023	2023-01-02 15:00:37 -05:00
verify_heapam.c	Pre-beta mechanical code beautification.	2023-05-19 17:24:48 -04:00
verify_nbtree.c	Fix search_path to a safe value during maintenance operations.	2023-06-09 11:20:47 -07:00