> I agree that we should do the check for the 'World-readable'
> pg_user and give a warning if someone attempts to assign a password.
> I still think the admin should be given an option in the dbinit script to
> choose whether or no to run the 'REVOKE'. At this point it would be easy
> to inform the admin what the trade-offs are, and we will have his/her
> undivided attention (They will be more apt to read about it to get past the
> prompt.).
>
> These changes should not take long to make. I need to get the current
> CVS version (I will do so tonight), and I should have the changes
> (performed and tested) in a day or so.
Sure, why not ask the admin. Saves him a step when he tries to do the
first password. I just think we should also check when doing a password
change, which makes sense.
--
Bruce Momjian
maillist@candle.pha.pa.us