Re: Relaxing SSL key permission checks

Re: Tom Lane 2016-02-22 <21507(dot)1456099088(at)sss(dot)pgh(dot)pa(dot)us>
> Stephen Frost <sfrost(at)snowman(dot)net> writes:
> > Just to be clear, I'm not really against this patch as-is, but it
> > shouldn't be a precedent or limit us from supporting more permissive
> > permissions in other areas (or even here) if there are sensible
> > use-cases for more permissive permissions.
>
> OK, and to be clear, I'm not against considering other use-cases and
> trying to do something appropriate for them. I just reject the idea
> that it's unnecessary or inappropriate for us to be concerned about
> whether secret-holding files are secure.

I added the patch to the CF: https://commitfest.postgresql.org/9/532/

(I put it under "System administration" and not under "Security"
because it concerns operation.)

Christoph
--
cb(at)df7cb(dot)de | http://www.df7cb.de/