Re: Spoofing as the postmaster - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Spoofing as the postmaster
Date
Msg-id 15589.1198445859@sss.pgh.pa.us
Whole thread Raw
In response to Re: Spoofing as the postmaster  (Kurt Roeckx <kurt@roeckx.be>)
List pgsql-hackers
Kurt Roeckx <kurt@roeckx.be> writes:
> On Sun, Dec 23, 2007 at 02:52:28PM -0500, Tom Lane wrote:
>> a feature.  It would be completely inappropriate for us as upstream to
>> destroy that property, and my fundamental objection to what Debian
>> has done is that they've destroyed that property at the distro level.

> The default postgresql.conf in Debian contains a line like this:
> unix_socket_directory = '/var/run/postgresql'

> I don't understand what restriction you mean.  What was changed is the
> default location of the unix domain socket.  If you still want it in
> /tmp, you can put it there.

Not as easily as all that, because the system copy of libpq.so has the
other directory hard-wired into it.  Yes, you can sort of make it work
if you have to, but it's inconvenient and error-prone.

> I think there are basicly two reasons to move it:
> - It's insecure, as this thread shows
> - The FHS says the they should be placed in /var/run/, probably
>   for the first reason.

We've had that discussion before.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Martijn van Oosterhout
Date:
Subject: Re: Spoofing as the postmaster
Next
From: Tomasz Ostrowski
Date:
Subject: Re: Spoofing as the postmaster