From:
Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To:
"Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
Cc:
"Josh Berkus" <josh(at)agliodbs(dot)com>,
"Alvaro Herrera" <alvherre(at)commandprompt(dot)com>,
"Chander Ganesan" <chander(at)otg-nc(dot)com>,
"PostgreSQL-development" <pgsql-hackers(at)postgresql(dot)org>
Subject:
Re: We should Axe /contrib/start-scripts
Date:
2009-08-25 20:41:00
Message-ID:
2325.1251232860@sss.pgh.pa.us (view raw or flat )
Thread:
2009-08-19 18:18:20 from Josh Berkus <josh(at)agliodbs(dot)com>
2009-08-19 18:39:39 from Chander Ganesan <chander(at)otg-nc(dot)com>
2009-08-19 18:48:08 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 18:55:22 from Josh Berkus <josh(at)agliodbs(dot)com>
2009-08-19 19:01:30 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 20:09:08 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-19 21:03:52 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 21:14:28 from "David E(dot) Wheeler" <david(at)kineticode(dot)com>
2009-08-19 21:29:34 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 21:22:23 from Bruce Momjian <bruce(at)momjian(dot)us>
2009-08-19 21:32:35 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-19 22:13:00 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 22:46:15 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-19 22:52:25 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 19:34:28 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 19:46:31 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2009-08-25 19:54:06 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-25 20:13:24 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 21:23:17 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2009-08-25 19:48:07 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
2009-08-25 19:53:15 from Chander Ganesan <chander(at)otg-nc(dot)com>
2009-08-25 20:03:44 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 20:11:31 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-25 20:27:22 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 20:41:00 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-25 21:26:11 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 22:03:30 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-25 22:31:50 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 22:42:12 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
2009-08-25 23:07:04 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-26 14:53:58 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-26 15:05:38 from Chander Ganesan <chander(at)otg-nc(dot)com>
2009-08-26 15:09:58 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-26 15:23:06 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-26 00:17:01 from Aidan Van Dyk <aidan(at)highrise(dot)ca>
2009-08-26 00:22:16 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-26 00:44:17 from Chander Ganesan <chander(at)otg-nc(dot)com>
2009-08-26 23:32:49 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-26 23:51:30 from Greg Stark <gsstark(at)mit(dot)edu>
2009-08-27 00:01:17 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-27 00:27:42 from Greg Stark <gsstark(at)mit(dot)edu>
2009-08-27 00:38:49 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-27 00:59:02 from Andrew Dunstan <andrew(at)dunslane(dot)net>
2009-08-27 01:02:40 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-27 06:54:22 from Magnus Hagander <magnus(at)hagander(dot)net>
2009-08-25 20:16:34 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
2009-08-25 20:41:41 from "Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov>
2009-08-25 20:46:08 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-25 20:47:28 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
2009-08-19 21:52:32 from Greg Stark <gsstark(at)mit(dot)edu>
2009-08-19 22:18:58 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 20:31:47 from Josh Berkus <josh(at)agliodbs(dot)com>
2009-08-19 21:02:54 from Bruce Momjian <bruce(at)momjian(dot)us>
2009-08-19 18:58:56 from "David E(dot) Wheeler" <david(at)kineticode(dot)com>
2009-08-19 19:01:16 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
2009-08-19 19:06:09 from Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
2009-08-19 19:00:00 from Alvaro Herrera <alvherre(at)commandprompt(dot)com>
Lists:
pgsql-hackers
"Kevin Grittner" <Kevin(dot)Grittner(at)wicourts(dot)gov> writes:
> You're thinking that pg_ctl would capture it's parent PID and pass it
> to the postmaster one way or the other? That seems like it covers the
> specific issue you were referencing up-thread. It has been bubbling
> around in my head that we have other processes which run under the
> same user ID for such things as vacuum and purge scripts, as well as
> rsync of backup files. These would still create some risk of a false
> match, right? Just a much smaller risk?
Only if they are running at times when your postmaster(s) aren't ...
realistically, unless you launch them from initscripts that start before
your postmasters launch, I don't think there's going to be a problem.
Still, just from a security point of view, it might be better if those
don't run as the postgres operating-system user. Not sure if that's
workable for rsync (since it has to be able to read the postgres files)
but stuff like vacuum scripts could surely be run from a different
userid.
regards, tom lane
In response to
Responses
pgsql-hackers by date
Next :From: Kevin GrittnerDate: 2009-08-25 20:41:41Subject : Re: We should Axe /contrib/start-scriptsPrevious :From : Alvaro HerreraDate : 2009-08-25 20:39:50Subject : Re: pg_hba.conf: samehost and samenet
