Re: [HACKERS] SSL over Unix-domain sockets

Поиск
Список
Период
Сортировка
От Bruce Momjian
Тема Re: [HACKERS] SSL over Unix-domain sockets
Дата
Msg-id 200801171610.m0HGAlZ25049@momjian.us
обсуждение исходный текст
Ответ на Re: [HACKERS] SSL over Unix-domain sockets  (Peter Eisentraut <peter_e@gmx.net>)
Ответы Re: [HACKERS] SSL over Unix-domain sockets  (Tom Lane <tgl@sss.pgh.pa.us>)
Re: [HACKERS] SSL over Unix-domain sockets  (Peter Eisentraut <peter_e@gmx.net>)
Список pgsql-patches
Peter Eisentraut wrote:
> Bruce Momjian wrote:
> > I have written the following documentation addition suggesting the use
> > of external_pid_file.
>
> How does that prevent spoofing?

It creates a lock file that is the same name as the socket file that a
default-configured client would use, so it prevents a spoofed socket
from being created.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://postgres.enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

В списке pgsql-patches по дате отправления:

Предыдущее
От: Magnus Hagander
Дата:
Сообщение: Re: minor pgcrypto doc update
Следующее
От: Tom Lane
Дата:
Сообщение: Re: [HACKERS] SSL over Unix-domain sockets