From: | Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> |
---|---|
To: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
Cc: | PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org> |
Subject: | Re: Open 7.3 items |
Date: | 2002-07-31 19:28:42 |
Message-ID: | 200207311928.g6VJSh307506@candle.pha.pa.us |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
Tom Lane wrote:
> > Socket permissions - only install user can access db by default
>
> I do not agree with this goal.
OK, this is TODO item:
* Make single-user local access permissions the default by limiting
permissions on the socket file (Peter E)
Right now, we effectively install initdb as though we are creating a
world-writeable directory on the machine. (Sure, the directory is
locked down, but by setting PGUSER you can connect to the database as
anyone.) I don't know any other software that does this, and I can't
see how we can justify the current behavior.
Another idea is to change pg_hba.conf to not default to 'trust' but then
the installing user is going to have to choose a password.
--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
From | Date | Subject | |
---|---|---|---|
Next Message | Bruce Momjian | 2002-07-31 19:30:30 | Re: Open 7.3 items |
Previous Message | Jeff MacDonald | 2002-07-31 18:58:38 | Re: Trim the Fat (Was: Re: Open 7.3 items ) |