Re: [HACKERS] SSL over Unix-domain sockets

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: [HACKERS] SSL over Unix-domain sockets
Дата
Msg-id 9905.1200587500@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: [HACKERS] SSL over Unix-domain sockets  (Bruce Momjian <bruce@momjian.us>)
Ответы Re: [HACKERS] SSL over Unix-domain sockets  (Andrew Dunstan <andrew@dunslane.net>)
Список pgsql-patches
Bruce Momjian <bruce@momjian.us> writes:
> Peter Eisentraut wrote:
>> How does that prevent spoofing?

> It creates a lock file that is the same name as the socket file that a
> default-configured client would use, so it prevents a spoofed socket
> from being created.

Only if the attacker didn't get there first.  I think this idea is
nothing but a crude kluge anyway...

            regards, tom lane

В списке pgsql-patches по дате отправления:

Предыдущее
От: Bruce Momjian
Дата:
Сообщение: Re: [HACKERS] SSL over Unix-domain sockets
Следующее
От: Andrew Dunstan
Дата:
Сообщение: Re: [HACKERS] SSL over Unix-domain sockets