• Noah Misch's avatar
    Lock down regression testing temporary clusters on Windows. · f6dc6dd5
    Noah Misch authored
    Use SSPI authentication to allow connections exclusively from the OS
    user that launched the test suite.  This closes on Windows the
    vulnerability that commit be76a6d3
    closed on other platforms.  Users of "make installcheck" or custom test
    harnesses can run "pg_regress --config-auth=DATADIR" to activate the
    same authentication configuration that "make check" would use.
    Back-patch to 9.0 (all supported versions).
    
    Security: CVE-2014-0067
    f6dc6dd5
regress.sgml 26.5 KB