Re: [HACKERS] mode of libs - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [HACKERS] mode of libs
Date
Msg-id 199802260317.WAA10196@candle.pha.pa.us
Whole thread Raw
In response to Re: [HACKERS] mode of libs  ("Vadim B. Mikheev" <vadim@sable.krasnoyarsk.su>)
Responses Re: [HACKERS] mode of libs  (The Hermit Hacker <scrappy@hub.org>)
List pgsql-hackers
>
> Bruce Momjian wrote:
> >
> > >
> > > Is this Ok ?
> > >
> > > /home/postgres/lib > ls -l
> > > total 711
> > > -r--r--r--  1 postgres  users     605 26 ��� 07:57 global1.bki.source
> > > -r--r--r--  1 postgres  users       0 26 ��� 07:57 global1.description
> > > -r--r--r--  1 postgres  users    8994 26 ��� 07:57 libecpg.a
> > > lrwxrwxrwx  1 postgres  users      14 26 ��� 07:57 libecpg.so -> libecpg.so.1.0
> > >      ^  ^
> >
> > Good eye.  Fixed.  Was in configure.in as 664 not 644.  No reason to
> > give group write permission, right?
>
> Yes. And "others" too...

Now there is a bigger problem.  pg_pwd is mode rw-rw-rw- because a COPY
is used to create it.  Any ideas how to fix this?  Copy sets the
permissions to this before it creates the file.  It temporarily changes
the umask to create the file.  If pg_pwd ever has data in it and it is
world-readable, it is unsecure.

Anyone have a brilliant idea on a fix?

--
Bruce Momjian                          |  830 Blythe Avenue
maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
  +  If your life is a hard drive,     |  (610) 353-9879(w)
  +  Christ can be your backup.        |  (610) 853-3000(h)

pgsql-hackers by date:

Previous
From: "Thomas G. Lockhart"
Date:
Subject: Re: [HACKERS] Re: [QUESTIONS] Installation Postgresql95 on linux slackware
Next
From: Brett McCormick
Date:
Subject: alpha/64bit & mkoidname problem