Re: SSL Mode

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: SSL Mode
Дата
Msg-id 200212232243.gBNMhi002622@candle.pha.pa.us
обсуждение исходный текст
Ответ на Re: SSL Mode  (Dan Langille <dan@langille.org>)
Список pgsql-admin
Dan Langille wrote:
> On Mon, 23 Dec 2002, Bruce Momjian wrote:
>
> >
> > PostgreSQL is designed to _not_ require root access, so we just make
> > everything owned by the install user.  I don't see how group checks can
> > help there.  Also, there is no postgres group, at least by default, and
> > no special handling based on group, though we do allow group permissions
> > on the /tmp socket file.
>
> FWIW, I know the FreeBSD port creates both a pgsql user and a pgsql group.
> I have seen evidence that some Linux distributions create a postgres user.

Yes, that is true, and if they want to patch be-secure.c, that is fine.
However, we don't _assume_ such things exist, and don't require them.
That is the (secure) key.  ;-)

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

В списке pgsql-admin по дате отправления:

Предыдущее
От: Dan Langille
Дата:
Сообщение: Re: SSL Mode
Следующее
От: Tom Lane
Дата:
Сообщение: Re: SSL Mode