Re: [HACKERS] text patch -- sugg cmd when run as root - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: [HACKERS] text patch -- sugg cmd when run as root
Date
Msg-id 199805122017.QAA13560@candle.pha.pa.us
Whole thread Raw
In response to text patch -- sugg cmd when run as root  (Brett McCormick <brett@work.chicken.org>)
Responses Re: [HACKERS] text patch -- sugg cmd when run as root
List pgsql-hackers
>
> When you run postgresql as root, the command it gives for putting in
> your startup script is a little weird.  The main issue is that 2>&1
> only works in bash, not tcsh.  >& works in both, so it seems
> preferable.  Another minor issue is that it echoes the command and
> pipes it through su.  Shouldn't this be "su - postgres -c 'cmd'"?  Do
> all versions of su have the '-c' argument?  piping it through seems
> weird, but maybe it isn't.
>
> this is a straight diff for src/backend/main/main.c
>
> --cut here--
> 38c38
> < echo \"postmaster -B 256 >/var/log/pglog 2>&1 &\" | su - postgres\n\n"
> ---
> > su - postgres -c 'postmaster -B 256 >& /var/log/pglog' &\n\n"
> --cut here--
>
>

I have changed the text to:

\n\"root\" execution of the PostgreSQL backend is not permitted.\n\n\
The backend must be started under it's own userid to prevent\n\
a possible system security compromise. See the INSTALL file for\n\
more information on how to properly start the postmaster.\n\n"



--
Bruce Momjian                          |  830 Blythe Avenue
maillist@candle.pha.pa.us              |  Drexel Hill, Pennsylvania 19026
  +  If your life is a hard drive,     |  (610) 353-9879(w)
  +  Christ can be your backup.        |  (610) 853-3000(h)

pgsql-hackers by date:

Previous
From: ocie@paracel.com
Date:
Subject: Re: [HACKERS] mmap and MAP_ANON
Next
From: Brett McCormick
Date:
Subject: Re: [HACKERS] text patch -- sugg cmd when run as root