On 31.01.24 06:28, Tom Lane wrote: >> The idea of adding a file to the data directory appeals to me. >> >> optional_runtime_features.conf >> alter_system=enabled >> copy_from_program=enabled >> copy_to_program=disabled > ... so, exactly what keeps an uncooperative superuser from > overwriting that file?
The point of this feature would be to keep the honest people honest.
The first thing I did when ALTER SYSTEM came out however many years ago was to install Nagios checks to warn when postgresql.auto.conf exists. Because the thing is an attractive nuisance, especially when you want to do centralized configuration control. Of course you can bypass it using COPY PROGRAM etc., but then you *know* that you are *bypassing* something. If you just see ALTER SYSTEM, you'll think, "that is obviously the appropriate tool", and there is no generally accepted way to communicate that, in particular environment, it might not be.