Restricting permissions on Unix socket

Поиск
Список
Период
Сортировка
От Peter Eisentraut
Тема Restricting permissions on Unix socket
Дата
Msg-id Pine.LNX.4.21.0010312136190.1073-100000@peter.localdomain
обсуждение исходный текст
Ответы Re: Restricting permissions on Unix socket  (Alfred Perlstein <bright@wintelcom.net>)
Список pgsql-hackers
I'd like to add an option or two to restrict the set of users that can
connect to the Unix domain socket of the postmaster, as an extra security
option.

I imagine something like this:

unix_socket_perm = 0660
unix_socket_group = pgusers

Obviously, permissions that don't have 6's in there don't make much sense,
but I feel this notation is the most intuitive way for admins.

I'm not sure how to do the group thing, though.  If I use chown(2) then
there's a race condition, but doing savegid; create socket; restoregid
might be too awkward?  Any hints?

-- 
Peter Eisentraut      peter_e@gmx.net       http://yi.org/peter-e/



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Alfred Perlstein
Дата:
Сообщение: Re: 7.0.2 crash (maybe linux kernel bug??)
Следующее
От: "Kevin O'Gorman"
Дата:
Сообщение: Contexts