Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>, Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Date: 2001-11-28 20:53:11
Message-ID: 200111282053.fASKrB606045@candle.pha.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

> Tom Lane writes:
>
> > It's not that it's "okay", it's that we haven't got any good
> > alternatives. Password auth sucks from a convenience point of view
> > (or even from a possibility point of view, for scripts; don't forget
> > the changes that you yourself recently applied to guarantee that a
> > script *cannot* supply a password to psql). Ident auth doesn't work,
> > or isn't secure, in a lot of cases. Kerberos, well, not a lot to
> > offer there either. What else do you want to make the default?
>
> unix_socket_permissions = 0700

Interesting.

This means only the super-user can connect. Hmm, seems like an
interesting idea. You have to _open_ up the database to other users on
your local system. If you are running a server, you are the only person
so there is no downside.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2001-11-28 20:54:41 Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Previous Message Peter Eisentraut 2001-11-28 20:48:42 Re: CVS branch management (was Re: A problem with new