Re: [GENERAL] worried about PGPASSWORD drop
От
Bruce Momjian
Тема
Re: [GENERAL] worried about PGPASSWORD drop
Дата
Msg-id
200208292306.g7TN6ZG08318@candle.pha.pa.us
Ответ на
Re: [GENERAL] worried about PGPASSWORD drop (Alvaro Herrera)
Список
Дерево обсуждения
Re: [GENERAL] worried about PGPASSWORD drop Alvaro Herrera <alvherre@atentus.com>
Re: [GENERAL] worried about PGPASSWORD drop Bruce Momjian <pgman@candle.pha.pa.us>
Re: [GENERAL] worried about PGPASSWORD drop Bruce Momjian <pgman@candle.pha.pa.us>
Re: [GENERAL] worried about PGPASSWORD drop "Nigel J. Andrews" <nandrews@investsystems.co.uk>
Re: [GENERAL] worried about PGPASSWORD drop Bruce Momjian <pgman@candle.pha.pa.us>
Re: [GENERAL] worried about PGPASSWORD drop "Nigel J. Andrews" <nandrews@investsystems.co.uk>
Re: [GENERAL] worried about PGPASSWORD drop Bruce Momjian <pgman@candle.pha.pa.us>
Patch applied. Thanks. --------------------------------------------------------------------------- Alvaro Herrera wrote: > En Wed, 28 Aug 2002 17:33:34 -0400 (EDT) > Bruce Momjian escribi?: > > > Alvaro Herrera wrote: > > > Bruce Momjian dijo: > > > > > > > Tom Lane wrote: > > > > > > > > If you want to put in security restrictions that are actually useful, > > > > > where is the code to verify that PGPASSWORDFILE points at a > > > > > non-world-readable file? That needs to be there now, not later, or > > > > > we'll have people moaning about backward compatibility when we finally > > > > > do plug that hole. > > > > > > > > Agreed. > > > > > > Point taken, will look into it later. > > > > Here is some code from postmaster.c that may help: > > Thank you. Patch attached. Note that it also checks group access; I think > that is desired as well. > > -- > Alvaro Herrera () > "Cuando ma?ana llegue pelearemos segun lo que ma?ana exija" (Mowgli) [ Attachment, skipping... ] -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073
В списке pgsql-patches по дате отправления