Re: Spoofing as the postmaster

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Spoofing as the postmaster
Дата
Msg-id 15589.1198445859@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Spoofing as the postmaster  (Kurt Roeckx <kurt@roeckx.be>)
Список pgsql-hackers
Kurt Roeckx <kurt@roeckx.be> writes:
> On Sun, Dec 23, 2007 at 02:52:28PM -0500, Tom Lane wrote:
>> a feature.  It would be completely inappropriate for us as upstream to
>> destroy that property, and my fundamental objection to what Debian
>> has done is that they've destroyed that property at the distro level.

> The default postgresql.conf in Debian contains a line like this:
> unix_socket_directory = '/var/run/postgresql'

> I don't understand what restriction you mean.  What was changed is the
> default location of the unix domain socket.  If you still want it in
> /tmp, you can put it there.

Not as easily as all that, because the system copy of libpq.so has the
other directory hard-wired into it.  Yes, you can sort of make it work
if you have to, but it's inconvenient and error-prone.

> I think there are basicly two reasons to move it:
> - It's insecure, as this thread shows
> - The FHS says the they should be placed in /var/run/, probably
>   for the first reason.

We've had that discussion before.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Martijn van Oosterhout
Дата:
Сообщение: Re: Spoofing as the postmaster
Следующее
От: Tomasz Ostrowski
Дата:
Сообщение: Re: Spoofing as the postmaster