Re: Re: BUG #13755: pgwin32_is_service not checking if SECURITY_SERVICE_SID is disabled

Поиск
Список
Период
Сортировка
От Tsunakawa, Takayuki
Тема Re: Re: BUG #13755: pgwin32_is_service not checking if SECURITY_SERVICE_SID is disabled
Дата
Msg-id 0A3221C70F24FB45833433255569204D1F6566FA@G01JPEXMBYT05
обсуждение исходный текст
Ответ на Re: Re: BUG #13755: pgwin32_is_service not checking if SECURITY_SERVICE_SID is disabled  (Craig Ringer <craig@2ndquadrant.com>)
Ответы Re: Re: BUG #13755: pgwin32_is_service not checking if SECURITY_SERVICE_SID is disabled
Список pgsql-hackers
From: Craig Ringer [mailto:craig@2ndquadrant.com]
> You meant CheckTokenMembership().

Yes, my typo in the mail.

> The proposed patch does need to be checked with:

I understood you meant by "refuse to run" that postgres.exe fails to start below.  Yes, I checked it on Win10.  I don't
haveaccess to WinXP/2003 - Microsoft ended their support.
 
if (pgwin32_is_admin()){    write_stderr("Execution of PostgreSQL by a user with administrative permissions is not\n"
             "permitted.\n"                 "The server must be started under an unprivileged user ID to prevent\n"
"possiblesystem security compromises.  See the documentation for\n"              "more information on how to properly
startthe server.\n");    exit(1);}
 

Regards
Takayuki Tsunakawa






В списке pgsql-hackers по дате отправления:

Предыдущее
От: Pavel Stehule
Дата:
Сообщение: Re: patch: function xmltable
Следующее
От: "Tsunakawa, Takayuki"
Дата:
Сообщение: Re: [RFC] Should we fix postmaster to avoid slow shutdown?