> > I've not heard of /bin/true as a shell. But again, I'm still a linux newbie. What
> > I've set up for all the users on the system who I don't to give shell access to is
> > /sbin/nologin
> While I was thinking on that, I would say keeping shell for postgres user is a
> good idea from maintenance POV. Afterall job is not over after database is
> started and giving postgres user a shell is better than giving root access to
> somebody unless you are the sysdba..
Perfectly valid point.
However, when I need to do maintenence, I can simply go in and change the
shell then change it back. That's very different from giving user postgres a
permanent shell. And as I'd be rebooting (only because I'm still learning and not
because there might be problems with the system) more often than I'd be doing
maintenence on PG, I need to be able to get PG to start up during boot.
Perhaps I'm being overly paranoid but I've already been hacked once due to lax
security. I'm just trying to cover all of my bases.
thnx,
Chris
