Re: Spoofing as the postmaster

Kurt Roeckx <kurt(at)roeckx(dot)be> writes:
> On Sun, Dec 23, 2007 at 02:52:28PM -0500, Tom Lane wrote:
>> a feature. It would be completely inappropriate for us as upstream to
>> destroy that property, and my fundamental objection to what Debian
>> has done is that they've destroyed that property at the distro level.

> The default postgresql.conf in Debian contains a line like this:
> unix_socket_directory = '/var/run/postgresql'

> I don't understand what restriction you mean. What was changed is the
> default location of the unix domain socket. If you still want it in
> /tmp, you can put it there.

Not as easily as all that, because the system copy of libpq.so has the
other directory hard-wired into it. Yes, you can sort of make it work
if you have to, but it's inconvenient and error-prone.

> I think there are basicly two reasons to move it:
> - It's insecure, as this thread shows
> - The FHS says the they should be placed in /var/run/, probably
> for the first reason.

We've had that discussion before.

regards, tom lane