Skip site navigation (1) Skip section navigation (2)

Re: separating PG binaries into a ro mounted partition

From: Phillip Smith <phillip(dot)smith(at)weatherbeeta(dot)com(dot)au>
To: Albretch Mueller <lbrtchx(at)gmail(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: separating PG binaries into a ro mounted partition
Date: 2007-12-30 05:41:57
Message-ID: 1198993317.5591.19.camel@cassandra-desktop (view raw or flat)
Thread:
Lists: pgsql-admin
What are you trying to acheive by making the binaries read-only?

All the config files reside in the data directory so there shoudl be a
problem making /usr/local/postgres/bin (or whatever you choose to
install the binaries) to be a read-only mounted partition. The other
option (which is far easier) would be to set the binaries immutable. As
root, run this:
    chattr +i /use/local/postgres/bin/*

That way only root can remove the immutable flag so they can be changed
- if it's a security issue behind your desire to do this then it doesn't
matter that root can do that versus your suggestion as root would be
able to just remount the partition rw:
    mount -o remount,rw /usr/local/postgres

If you can advise why you want them to be read-only then we can make
better suggestions.

Cheers,
~p


THINK BEFORE YOU PRINT - Save paper if you don't really need to print this

*******************Confidentiality and Privilege Notice*******************

The material contained in this message is privileged and confidential to
the addressee.  If you are not the addressee indicated in this message or
responsible for delivery of the message to such person, you may not copy
or deliver this message to anyone, and you should destroy it and kindly
notify the sender by reply email.

Information in this message that does not relate to the official business
of Weatherbeeta must be treated as neither given nor endorsed by Weatherbeeta.
Weatherbeeta, its employees, contractors or associates shall not be liable
for direct, indirect or consequential loss arising from transmission of this
message or any attachments
e-mail.

In response to

Responses

pgsql-admin by date

Next:From: Albretch MuellerDate: 2007-12-30 11:23:35
Subject: Re: separating PG binaries into a ro mounted partition
Previous:From: Albretch MuellerDate: 2007-12-30 02:40:04
Subject: separating PG binaries into a ro mounted partition

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group