Re: Simple postgresql.conf wizard

From: Greg Smith <gsmith(at)gregsmith(dot)com>
To: Robert Haas <robertmhaas(at)gmail(dot)com>
Cc: Josh Berkus <josh(at)agliodbs(dot)com>, pgsql-hackers(at)postgresql(dot)org
Subject: Re: Simple postgresql.conf wizard
Date: 2008-11-14 00:32:27
Message-ID: Pine.GSO.4.64.0811131924250.10918@westnet.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Thu, 13 Nov 2008, Robert Haas wrote:

>> listen_addresses = '*'
>
> This doesn't seem like a good thing to autogenerate from a security
> perspective. I think we should not attempt to guess the user's
> requirements in this area.

Yeah, I don't want to be the guy who flips the switch for being less
secure by default. Particularly because it's unlikely to do anything by
itself--need some changes to pg_hba.conf in most cases. However, not
setting listen_addresses to something useful is a common newbie problem.
I was thinking of producing a warning to standard error with some
suggestions if listen_addresses isn't set to the usual '*', but not
actually changing the setting.

>> max_fsm_pages = DBsize / PageSize / 8
>
> Isn't this moot for 8.4?

At some point this is going to target earlier versions as well so it's
good to have that intelligence in the app, even if it ends up not being a
setting that is altered.

--
* Greg Smith gsmith(at)gregsmith(dot)com http://www.gregsmith.com Baltimore, MD

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2008-11-14 00:37:46 Re: array_agg and array_accum (patch)
Previous Message Alvaro Herrera 2008-11-14 00:08:44 Re: array_agg and array_accum (patch)