From: | James Laska <jal233(at)gmail(dot)com> |
---|---|
To: | pgsql-pkg-yum(at)postgresql(dot)org |
Subject: | EL7 and Apache private /tmp/ directories |
Date: | 2015-05-01 00:02:40 |
Message-ID: | CAFyeYZ4_ymebdv7h4zTpT2r7XHt894-y=mSF9_R=ZTTyxuWkLg@mail.gmail.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-pkg-yum |
Greetings,
In EL7 (RHEL+CentOS), as a security measure, Apache processes get a private
/tmp/ directory [1]. As a result, this means that any Apache processes
attempting to connect to postgresql using a domain socket will be unable to
connect.
EL7 (and Fedora) address this problem by updating the following setting in
postgresql.conf [2]
unix_socket_directories = '/var/run/postgresql, /tmp'
>
And by modifying DEFAULT_PGSOCKET_DIR in pg_config_manual.h [3].
-#define DEFAULT_PGSOCKET_DIR "/tmp"
> +#define DEFAULT_PGSOCKET_DIR "/var/run/postgresql"
>
Can these changes be included in the EL7 RPMs provided at yum.postgresql.org
?
Thanks,
James
[1] https://fedoraproject.org/wiki/Features/ServicesPrivateTmp
[2] http://bugzilla.redhat.com/825448
[3]
http://pkgs.fedoraproject.org/cgit/postgresql.git/tree/postgresql-var-run-socket.patch
From | Date | Subject | |
---|---|---|---|
Next Message | Peter Eisentraut | 2015-05-06 19:52:37 | pgbouncer systemd does not work on CentOS 7 |
Previous Message | Mark Wong | 2015-04-28 20:53:59 | Re: adding a new platform |