From 79c2619d699b30cec4dc98772ccfac1816317432 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?M=C3=A1rton=20Boros?= Date: Thu, 10 Sep 2026 18:06:22 +0300 Subject: [PATCH] fix: harden search_path in amcheck after-create.sql --- .../amcheck/after-create.sql | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/ansible/files/postgresql_extension_custom_scripts/amcheck/after-create.sql b/ansible/files/postgresql_extension_custom_scripts/amcheck/after-create.sql index 1fe5be353..d9a087c58 100644 --- a/ansible/files/postgresql_extension_custom_scripts/amcheck/after-create.sql +++ b/ansible/files/postgresql_extension_custom_scripts/amcheck/after-create.sql @@ -4,13 +4,13 @@ declare saved_search_path text := (select current_setting('search_path')); r record; begin - perform set_config('search_path', '', true); + perform set_config('search_path', 'pg_catalog, pg_temp', true); for r in select p.oid::regprocedure as sig - from pg_depend d - join pg_proc p on p.oid = d.objid and d.classid = 'pg_proc'::regclass - join pg_extension e on e.oid = d.refobjid + from pg_catalog.pg_depend d + join pg_catalog.pg_proc p on p.oid = d.objid and d.classid = 'pg_proc'::regclass + join pg_catalog.pg_extension e on e.oid = d.refobjid where e.extname = 'amcheck' and d.deptype = 'e' loop execute format('grant execute on routine %s to postgres', r.sig);