Re: help for:FATAL 1: configuration file `postgresql.conf' has wrong permissions

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: <bonolin(at)yahoo(dot)com>, <pgsql-bugs(at)postgreSQL(dot)org>
Subject: Re: help for:FATAL 1: configuration file `postgresql.conf' has wrong permissions
Date: 2001-08-05 22:15:43
Message-ID: Pine.LNX.4.30.0108060013470.11162-100000@peter.localdomain
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Tom Lane writes:

> A look at the source code shows it wants 744 or less.
>
> This is probably overly restrictive; in fact, I would argue that there
> should be no such check at all. We do not do runtime checks for
> permissions on any other files, and some of them are far more sensitive
> than postgresql.conf (password files for example). Peter, what is the
> rationale for having this check?

Security on a module basis perhaps (a.k.a. paranoia)? I could agree on
moving that check to $PGDATA but I feel it needs to be there. At least
one user was going to get into trouble here.

--
Peter Eisentraut peter_e(at)gmx(dot)net http://funkturm.homeip.net/~peter

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2001-08-05 22:26:57 Re: help for:FATAL 1: configuration file `postgresql.conf' has wrong permissions
Previous Message Tom Lane 2001-08-05 16:04:46 Re: HELP! BUG? pg_dump mucks up grant/revoke