Tom Lane writes:
> That does not change my opinion about the -X/PGXLOG switch though ---
> having a backup safety check is not an excuse for having a fundamentally
> insecure set of startup options.
OK, so:
1. Leave -X option in initdb. Remove all other -X options.
2. Remove all uses of PGXLOG.
3. Symlink from PGDATA to desired location.
4. Implement pg_mvxlog to move xlog if server is shut down. (So no one
needs to know about 3.)
In the future:
Combine pg_mvxlog, pg_controldata, pg_resetxlog into pg_srvadm.
Sounds good.
--
Peter Eisentraut peter_e@gmx.net