"Smith, Andy V " <andy(dot)v(dot)smith(at)citi(dot)com> writes:
> Can someone please advise what the most secure permissions are allowed for /usr/bin/postgres ?
> At the moment we have:
> -bash-3.2# ls -lt /usr/bin/postgres
> -rwxr-xr-x 1 root root 4574696 Jan 28 19:31 /usr/bin/postgres
> This is not considered secure.
"Not considered secure" by whom, and on what grounds? Those are pretty
much the standard permission settings for any executable in /usr/bin.
What threat do you suppose you'll ameliorate by changing them?
regards, tom lane