Re: What goes into the security doc?

On 22 Jan 2003 at 13:29, Christopher Kings-Lynne wrote:

> Recommend always running "initdb -W" and setting all pg_hba entries to md5.

Thanks.  I also encountered this item on IRC:

[09:26] <fede2> Guys, is there a problem with using /bin/true of 
/bin/false as the shell of the postgres user? The docs only says 
"adduser postgres" , witch will give postgres a nice shell.
[09:27] <fede2> I'm asking because the guys from Gentoo (thats a 
distro FWIW), want to use either /bin/false of /bin/true as postgres' 
shell.
[09:27] <dvl> fede2: it means you won't be able to become the 
postgres user to run commands.
[09:27] <mmc_> ... to run SHELL commands.
[09:29] <fede2> dvl: Aldo it's not the same, one could use "su -c foo 
postgres" to workarround it.
[09:30] <fede2> dvl: I was wondering if it had an even heavier 
reason, besides that.
[09:34] <mmc_> fede2: tha manpage of su says, that -c args is treated 
by the login shell !
[09:35] <fede2> mmc_: Hmm.. true. That makes it a heavy enough 
reason. Thanks.
[09:35] * fede2 departs
-- 
Dan Langille : http://www.langille.org/