Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens
Date
Msg-id 200112052123.fB5LNc012072@candle.pha.pa.us
Whole thread Raw
In response to Re: FW: [ppa-dev] Severe bug in debian - phppgadmin opens  (Peter Eisentraut <peter_e@gmx.net>)
List pgsql-hackers
> Tom Lane writes:
> 
> > It's not that it's "okay", it's that we haven't got any good
> > alternatives.  Password auth sucks from a convenience point of view
> > (or even from a possibility point of view, for scripts; don't forget
> > the changes that you yourself recently applied to guarantee that a
> > script *cannot* supply a password to psql).  Ident auth doesn't work,
> > or isn't secure, in a lot of cases.  Kerberos, well, not a lot to
> > offer there either.  What else do you want to make the default?
> 
> unix_socket_permissions = 0700

Added to TODO:

* Allow secure single-user use without passwords using Unix socket permissions

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
853-3000+  If your life is a hard drive,     |  830 Blythe Avenue +  Christ can be your backup.        |  Drexel Hill,
Pennsylvania19026
 


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: Security note: MS SQL is current worm vector
Next
From: "Ross J. Reedstrom"
Date:
Subject: Re: Licensing