Skip to content

Review use of /tmp and public secondary databases across invocations #110

Description

@refset

I just added ATTACH DATABASE support such that Play can now read from any public S3 bucket. Behind the scenes there's a shared object store cache which may 'leak' previously attached databases from earlier invocations. XT doesn't currently offer an SQL APIs that could interrogate this, but it's something to mindful of.

Similarly, users are able to specify !Local directories in their ATTACH config, although shouldn't need to (since in-memory works fine), and nothing should get written (compaction is disabled).

Further, ATTACH DATABASE is effectively read only right now, but if BEGIN ever supports a DB param or USE DATABASE gets implemented (etc.) then we may want to lock things down further.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions