Re: Relaxing SSL key permission checks

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Stephen Frost <sfrost(at)snowman(dot)net>
Cc: Christoph Berg <myon(at)debian(dot)org>, Bruce Momjian <bruce(at)momjian(dot)us>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Relaxing SSL key permission checks
Date: 2016-02-21 23:58:08
Message-ID: 21507.1456099088@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Stephen Frost <sfrost(at)snowman(dot)net> writes:
> Just to be clear, I'm not really against this patch as-is, but it
> shouldn't be a precedent or limit us from supporting more permissive
> permissions in other areas (or even here) if there are sensible
> use-cases for more permissive permissions.

OK, and to be clear, I'm not against considering other use-cases and
trying to do something appropriate for them. I just reject the idea
that it's unnecessary or inappropriate for us to be concerned about
whether secret-holding files are secure.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Thom Brown 2016-02-22 00:39:10 Re: Proposal: "Causal reads" mode for load balancing reads without stale data
Previous Message Thomas Munro 2016-02-21 23:18:55 Re: Proposal: "Causal reads" mode for load balancing reads without stale data