diff options
| author | Noah Misch <noah@leadboat.com> | 2014-12-17 22:48:40 -0500 |
|---|---|---|
| committer | Noah Misch <noah@leadboat.com> | 2014-12-17 22:48:40 -0500 |
| commit | f6dc6dd5ba54d52c0733aaafc50da2fbaeabb8b0 (patch) | |
| tree | 4cba95a8ca5f305feac60ead92f8fdd3519311aa /src/Makefile.global.in | |
| parent | fc2ac1fb41c2defb8caf825781af75db158fb7a9 (diff) | |
| download | postgresql-f6dc6dd5ba54d52c0733aaafc50da2fbaeabb8b0.tar.gz | |
Lock down regression testing temporary clusters on Windows.
Use SSPI authentication to allow connections exclusively from the OS
user that launched the test suite. This closes on Windows the
vulnerability that commit be76a6d39e2832d4b88c0e1cc381aa44a7f86881
closed on other platforms. Users of "make installcheck" or custom test
harnesses can run "pg_regress --config-auth=DATADIR" to activate the
same authentication configuration that "make check" would use.
Back-patch to 9.0 (all supported versions).
Security: CVE-2014-0067
Diffstat (limited to 'src/Makefile.global.in')
| -rw-r--r-- | src/Makefile.global.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/Makefile.global.in b/src/Makefile.global.in index ba5aef9ea4..481a78f6c3 100644 --- a/src/Makefile.global.in +++ b/src/Makefile.global.in @@ -323,7 +323,7 @@ endef define prove_check $(MKDIR_P) tmp_check/log $(MAKE) -C $(top_builddir) DESTDIR='$(CURDIR)'/tmp_check/install install >'$(CURDIR)'/tmp_check/log/install.log 2>&1 -cd $(srcdir) && TESTDIR='$(CURDIR)' PATH="$(CURDIR)/tmp_check/install$(bindir):$$PATH" $(call add_to_path,$(ld_library_path_var),$(CURDIR)/tmp_check/install$(libdir)) PGPORT='6$(DEF_PGPORT)' $(PROVE) $(PG_PROVE_FLAGS) $(PROVE_FLAGS) t/*.pl +cd $(srcdir) && TESTDIR='$(CURDIR)' PATH="$(CURDIR)/tmp_check/install$(bindir):$$PATH" $(call add_to_path,$(ld_library_path_var),$(CURDIR)/tmp_check/install$(libdir)) top_srcdir='$(top_srcdir)' PGPORT='6$(DEF_PGPORT)' $(PROVE) $(PG_PROVE_FLAGS) $(PROVE_FLAGS) t/*.pl endef else |