Re: Relaxing SSL key permission checks

* Tom Lane (tgl(at)sss(dot)pgh(dot)pa(dot)us) wrote:
> Christoph Berg <myon(at)debian(dot)org> writes:
> > The attached patch has successfully been included in the 9.6 Debian
> > package, passed the regression tests there, and I've also done some
> > chmod/chown tests on the filesystem to verify it indeed catches the
> > cases laid out by Tom.
>
> Please add this to the upcoming commitfest. We don't seem to have
> enough consensus to just apply it, but perhaps the review process
> will produce some agreement.

Just to be clear, I'm not really against this patch as-is, but it
shouldn't be a precedent or limit us from supporting more permissive
permissions in other areas (or even here) if there are sensible
use-cases for more permissive permissions.

Thanks!

Stephen