pgsql: Prevent pg_ctl from being run as root. - Mailing list pgsql-committers

From tgl@svr1.postgresql.org (Tom Lane)
Subject pgsql: Prevent pg_ctl from being run as root.
Date
Msg-id 20041022002418.0562432A308@svr1.postgresql.org
Whole thread Raw
List pgsql-committers
Log Message:
-----------
Prevent pg_ctl from being run as root.  Since it uses configuration files
owned by postgres, doing "pg_ctl start" as root could allow a privilege
escalation attack, as pointed out by iDEFENSE.  Of course the postmaster would
fail, but we ought to fail a little sooner to protect sysadmins unfamiliar
with Postgres.  The chosen fix is to disable root use of pg_ctl in all cases,
just to be confident there are no other holes.

Modified Files:
--------------
    pgsql/src/bin/pg_ctl:
        pg_ctl.c (r1.41 -> r1.42)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/src/bin/pg_ctl/pg_ctl.c.diff?r1=1.41&r2=1.42)

pgsql-committers by date:

Previous
From: tgl@svr1.postgresql.org (Tom Lane)
Date:
Subject: pgsql: Update obsolete comments about COPY vs INSERT options, per Uwe
Next
From: tgl@svr1.postgresql.org (Tom Lane)
Date:
Subject: pgsql: Prevent pg_ctl from being run as root.