Re: [COMMITTERS] pgsql-server/src

Oliver Elphick <olly@lfix.co.uk> writes:
>> Marc's idea of matching signature files would be a better
>> safety-checking mechanism than just making the data directory's xlog
>> link hard to get at.

> I would like to have Marc's safeguards as well.

Yeah, I was lukewarm about that at first, but the more I think about it
the better it seems.

That does not change my opinion about the -X/PGXLOG switch though ---
having a backup safety check is not an excuse for having a fundamentally
insecure set of startup options.
        regards, tom lane