Skip to content

Commit 3d1cd9e

Browse files
committed
Refine install instruction
1 parent ad70cfa commit 3d1cd9e

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

README.md

+2-1
Original file line numberDiff line numberDiff line change
@@ -96,12 +96,13 @@ shared_preload_libraries = 'pg_pathman'
9696
It is essential to restart the PostgreSQL instance. After that, execute the following query in psql:
9797
```plpgsql
9898
CREATE SCHEMA pathman;
99+
GRANT USAGE ON SCHEMA pathman TO PUBLIC;
99100
CREATE EXTENSION pg_pathman WITH SCHEMA pathman;
100101
```
101102

102103
Done! Now it's time to setup your partitioning schemes.
103104

104-
> **Security notice**: Do not install pg_pathman in public schemas! Specify the schema explicitly using the WITH SCHEMA clause. Installing an extension in a scheme that is accessible to malicious users can lead to a privilege escalation attack.
105+
> **Security notice**: Do not install pg_pathman in public schemas! Specify the schema explicitly using the WITH SCHEMA clause. Installing an extension into a schema in which attackers can create objects can lead to an elevation of privilege attack.
105106
106107
> **Windows-specific**: pg_pathman imports several symbols (e.g. None_Receiver, InvalidObjectAddress) from PostgreSQL, which is fine by itself, but requires that those symbols are marked as `PGDLLIMPORT`. Unfortunately, some of them are not exported from vanilla PostgreSQL, which means that you have to either use Postgres Pro Standard/Enterprise (which includes all necessary patches), or patch and build your own distribution of PostgreSQL.
107108

0 commit comments

Comments
 (0)