Re: pg_user permissions problem (Was: Re: [HACKERS] RE: New ecgp code problem.) - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: pg_user permissions problem (Was: Re: [HACKERS] RE: New ecgp code problem.)
Date
Msg-id 199802191431.JAA18146@candle.pha.pa.us
Whole thread Raw
In response to pg_user permissions problem (Was: Re: [HACKERS] RE: New ecgp code problem.)  (The Hermit Hacker <scrappy@hub.org>)
List pgsql-hackers
>     I spent time with Julie last night working on this, and the
> problem comes back down to "pg_user: Permission Denied"...
>
>     I think this is a high priority problem, since it affects so many
> things.
>
>     What is the chance of (how hard would it be to?) having a hard
> coded view setup that overrides the permissions lock on pg_user?  At what
> point is the lock implemented, software level, or file system?
>

I believe the only way to fix it at this point is to remove the REVOKE
pg_user from initdb, and add a check in user.c to make sure the
permissions on pg_user are not NULL if they try and use passwords.

--
Bruce Momjian
maillist@candle.pha.pa.us

pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: [HACKERS] Shared memory corruption?
Next
From: jwieck@debis.com (Jan Wieck)
Date:
Subject: Re: [HACKERS] Solution to the pg_user passwd problem !?? (c)