| From: | Bruno Wolff III <bruno(at)wolff(dot)to> |
|---|---|
| To: | "Tomeh, Husam" <htomeh(at)firstam(dot)com> |
| Cc: | "Joshua D(dot) Drake" <jd(at)commandprompt(dot)com>, "Goulet, Dick" <DGoulet(at)vicr(dot)com>, Stephan Szabo <sszabo(at)megazone(dot)bigpanda(dot)com>, Peter Eisentraut <peter_e(at)gmx(dot)net>, PgSQL ADMIN <pgsql-admin(at)postgresql(dot)org> |
| Subject: | Re: Installing PostgreSQL as "postgress" versus "root" |
| Date: | 2005-01-13 17:22:07 |
| Message-ID: | 20050113172207.GC13594@wolff.to |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-admin |
On Thu, Jan 13, 2005 at 08:06:05 -0800,
"Tomeh, Husam" <htomeh(at)firstam(dot)com> wrote:
> So does that mean there's no security issue using the root account to
> install postrgeSQL as the first book indicated? Thanks.
This depends on who you trust. The install scripts could potentially do
bad things. Generally you will need to do at least some part of the
install process as root. It is also a good idea to install the binaries
using a different user (and root is fine if there aren't any setuid/setgid
binaries) than the database will run under so that database users can't
corrupt the binaries via untrusted languages or bugs.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Christopher Browne | 2005-01-13 17:26:04 | Re: Installing PostgreSQL as "postgress" versus "root" Debate! |
| Previous Message | Scott Marlowe | 2005-01-13 17:18:32 | Re: Installing PostgreSQL as "postgress" versus "root" |