[postgis-devel] About EXTENSION from UNPACKAGED on PostgreSQL 13

[Stephen Frost]

Greetings,

* Sandro Santilli (strk at kbt.io) wrote:
> On Tue, Feb 25, 2020 at 03:27:39PM -0500, Stephen Frost wrote:
> > * Sandro Santilli (strk at kbt.io) wrote:
> 
> > 
> > >   2. Is it possible for `CREATE EXTENSION postgis` to do
> > >      the packaging if needed ?
> > 
> > I don't understand these questions..
> 
> When someone has postgis objects installed via
> scripts (not via extension), can CREATE EXTENSION
> technically mark those objects as being part of
> an extension instead ? That's exactly what
> `FROM UNPACKAGED` does at the moment. The question
> is: is it legit to do so from CREATE EXTENSION ?

The reason that we removed that ability from PG, as planned for v13, is
that it's inherently dangerous to do that...  it's also clearly rife for
abuse when combined with the trusted extension concept which allows
non-superusers to install extensions that have C code.

Thanks,

Stephen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/postgis-devel/attachments/20200226/3a58a796/attachment.sig>