Stephen Frost <sfrost@snowman.net> writes:
> * Tels (nospam-pg-abuse@bloodgate.com) wrote:
>> I'd argue that from a security standpoint it is important to log at
>> startup what addresses the service binds to, just so it is visible,
>> explicit and logged.
> It's also terribly useful for realizing there's an issue.
Good points both.
> Perhaps we could compromise by simply including the bind information in
> the 'ready to accept connections' message, like so:
> database system is ready to accept connections on (1.2.3.4)
That would be a problem from a couple of directions. First, it wouldn't
be unusual for there to be half a dozen addresses to list, not just one.
Even a default configuration would probably read like
database system is ready to accept connections on (127.0.0.1, ::1, /tmp/.s.PGSQL.5432)
which doesn't seem very appetizing to me. Second, it would be
considerably messier to implement because the "ready to accept
connections" message comes out physically distant from the
StreamServerPort function, and we don't save the struct addrinfo list
past the end of that function. So I think the logging setup I had in
my patch is pretty much the only sane way to do it, and we just have
to decide whether it's worth exposing at default log level or not.
regards, tom lane
