Re: That mode-700 check on DATADIR again

On 12/11/17 9:41 PM, Chapman Flack wrote:
> I have, more or less, this classic question:
>
> https://www.postgresql.org/message-id/4667C403.1070807%40t3go.de

<snip>

> However, when you stat a file with a POSIX ACL, you get shown the
> ACL's 'mask' entry (essentially the ceiling of all the 'extra' ACL
> entries) in place of the old-fashioned group bits. So in a
> non-ACL-aware ls or stat, the above looks like:
>
> [data]# ls -ld
> drwxr-x---+ 22 postgres postgres 4096 Dec 11 18:14 .
>
> ... and postgres refuses to start because it mistakes the r-x for
> 'group' permissions. ACLs have added new semantics to POSIX
> permissions, and postgres doesn't understand them when it makes this
> hey-don't-shoot-your-foot check.

I'm working on a patch that allows $PGDATA to have group r-x so that a
non-privileged user in the group can do a file-level backup.

However, it looks like it would work for your case as well based on your
ACL.

I'm planning to have the patch ready sometime next week and I'll respond
here once it goes into the CF. Reviews would be welcome!

Thanks,
--
-David
david(at)pgmasters(dot)net