Re: [GENERAL] worried about PGPASSWORD drop

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: [GENERAL] worried about PGPASSWORD drop
Дата
Msg-id 200208292306.g7TN6ZG08318@candle.pha.pa.us
обсуждение исходный текст
Ответ на Re: [GENERAL] worried about PGPASSWORD drop  (Alvaro Herrera <alvherre@atentus.com>)
Список pgsql-patches
Patch applied.  Thanks.

---------------------------------------------------------------------------


Alvaro Herrera wrote:
> En Wed, 28 Aug 2002 17:33:34 -0400 (EDT)
> Bruce Momjian <pgman@candle.pha.pa.us> escribi?:
>
> > Alvaro Herrera wrote:
> > > Bruce Momjian dijo:
> > >
> > > > Tom Lane wrote:
> > >
> > > > > If you want to put in security restrictions that are actually useful,
> > > > > where is the code to verify that PGPASSWORDFILE points at a
> > > > > non-world-readable file?  That needs to be there now, not later, or
> > > > > we'll have people moaning about backward compatibility when we finally
> > > > > do plug that hole.
> > > >
> > > > Agreed.
> > >
> > > Point taken, will look into it later.
> >
> > Here is some code from postmaster.c that may help:
>
> Thank you.  Patch attached.  Note that it also checks group access; I think
> that is desired as well.
>
> --
> Alvaro Herrera (<alvherre[a]atentus.com>)
> "Cuando ma?ana llegue pelearemos segun lo que ma?ana exija" (Mowgli)

[ Attachment, skipping... ]

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

В списке pgsql-patches по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Re: contrib/cube patches
Следующее
От: Justin Clift
Дата:
Сообщение: Re: Patch for pt_BR (libpq) - part two