TLS files permissions - how to loosen up PGSQL?

From: lejeczek <peljasz(at)yahoo(dot)co(dot)uk>
To: pgsql-admin(at)lists(dot)postgresql(dot)org
Subject: TLS files permissions - how to loosen up PGSQL?
Date: 2021-04-05 17:17:44
Message-ID: 5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Hi guys.

I want to have PGsql to leave access permissions to me, so I
could with simple help of 'xatrr' control those permissions.
You must have seen before:
...
 DETAIL:  File must have permissions u=rw (0600) or less if
owned by the database user, or permissions u=rw,g=r (0640)
or less if owned by root.
...
Permissions are as:

getfacl: Removing leading '/' from absolute path names
# file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
# owner: root
# group: root
user::rw-
user:postgres:r-x
group::---
mask::r-x
other::---

Is it possible, perhaps with use of PGsql configs have it work?
many thanks, L.

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message lejeczek 2021-04-05 17:33:40 Re: TLS files permissions - how to loosen up PGSQL?
Previous Message Jayson Hreczuck 2021-04-05 16:20:28 Re: Issue with postgresql13-contrib 13.2