EL7 and Apache private /tmp/ directories

From: James Laska <jal233(at)gmail(dot)com>
To: pgsql-pkg-yum(at)postgresql(dot)org
Subject: EL7 and Apache private /tmp/ directories
Date: 2015-05-01 00:02:40
Message-ID: CAFyeYZ4_ymebdv7h4zTpT2r7XHt894-y=mSF9_R=ZTTyxuWkLg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-pkg-yum

Greetings,

In EL7 (RHEL+CentOS), as a security measure, Apache processes get a private
/tmp/ directory [1]. As a result, this means that any Apache processes
attempting to connect to postgresql using a domain socket will be unable to
connect.

EL7 (and Fedora) address this problem by updating the following setting in
postgresql.conf [2]

unix_socket_directories = '/var/run/postgresql, /tmp'
>

And by modifying DEFAULT_PGSOCKET_DIR in pg_config_manual.h [3].

-#define DEFAULT_PGSOCKET_DIR "/tmp"
> +#define DEFAULT_PGSOCKET_DIR "/var/run/postgresql"
>

Can these changes be included in the EL7 RPMs provided at yum.postgresql.org
?

Thanks,
James

[1] https://fedoraproject.org/wiki/Features/ServicesPrivateTmp
[2] http://bugzilla.redhat.com/825448
[3]
http://pkgs.fedoraproject.org/cgit/postgresql.git/tree/postgresql-var-run-socket.patch

Responses

Browse pgsql-pkg-yum by date

  From Date Subject
Next Message Peter Eisentraut 2015-05-06 19:52:37 pgbouncer systemd does not work on CentOS 7
Previous Message Mark Wong 2015-04-28 20:53:59 Re: adding a new platform