Re: Required permissions for data directory

From: Andrew Dunstan <andrew(at)dunslane(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Required permissions for data directory
Date: 2004-10-12 19:18:20
Message-ID: 416C2DFC.6060905@dunslane.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Tom Lane wrote:

>
>Being able to edit postgresql.conf gives one the ability to become
>postgres (hint: you can cause the backend to load a shlib of your
>choosing, or even more trivially, adjust pg_hba.conf to let you in
>as superuser), so the above distinction is unenforceable.
>
>
>
>

And can't we now even point to a completely different location for the
actual data, as well as the rest of the config? I'd hate to think of
someone changing that out from under me.

cheers

andrew

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Joshua D. Drake 2004-10-12 19:22:59 Re: Required permissions for data directory
Previous Message Tom Lane 2004-10-12 19:14:13 Re: Strange code in initdb