Re: setuid(geteuid());?
От | Peter Eisentraut |
---|---|
Тема | Re: setuid(geteuid());? |
Дата | |
Msg-id | Pine.LNX.4.30.0104212012320.758-100000@peter.localdomain обсуждение исходный текст |
Ответ на | Re: setuid(geteuid());? (Tom Lane <tgl@sss.pgh.pa.us>) |
Список | pgsql-hackers |
Tom Lane writes: > I said: > > On machines that have setreuid(), or even better setresuid(), we could > > force the ruid (and suid for good measure) to match euid. Otherwise we > > probably should refuse to start unless getuid matches geteuid. > > But on third thought, it's not worth the trouble of adding two more > configure tests to support a configuration that I doubt anyone uses > anyway (ie, setuid postgres executable). Let's just remove the setuid() > and add a check for getuid() == geteuid() in main.c. > > Peter, unless you've already started in on this, I can take care of it > --- I see a couple of other nits I want to fix in those two files, too. Please do. I just ran across it for the session authorization deal, which would be easy to merge. -- Peter Eisentraut peter_e@gmx.net http://funkturm.homeip.net/~peter
В списке pgsql-hackers по дате отправления: