Re: BUG #2088: logfiles only readable by instance owner - Mailing list pgsql-bugs

From Bruce Momjian
Subject Re: BUG #2088: logfiles only readable by instance owner
Date
Msg-id 200512021759.jB2HxHD23384@candle.pha.pa.us
Whole thread Raw
In response to Re: BUG #2088: logfiles only readable by instance owner  (Dick Snippe <Dick.Snippe@tech.omroep.nl>)
Responses Re: BUG #2088: logfiles only readable by instance owner
Re: BUG #2088: logfiles only readable by instance owner
List pgsql-bugs
Dick Snippe wrote:
> On Fri, Dec 02, 2005 at 12:30:17AM -0500, Tom Lane wrote:
>
> > "Dick Snippe" <Dick.Snippe@tech.omroep.nl> writes:
> > > setting umask 077 makes sense for the data files, but not per se for the
> > > logfile.
> >
> > The logfile typically contains data just as sensitive as the data files,
>
> true.
>
> > so I disagree.
>
> we run postgresql as a database engine behind a number of websites.
> Typically all the data in the database is public data . It would be very
> nice if there was a method of letting our developers _read_ the logfile,
> without giving them _write_ access to the data files.
>
> What wrong with making this configurable?

We can't add every features that people ask for or our software would be
unusable.  If your log files recycle at midnight, can't you run a cron
job to chmod it?  I suppose if you can find other users who would like
to set the mode flags on the file, we can add it.

--
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman@candle.pha.pa.us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

pgsql-bugs by date:

Previous
From: Alvaro Herrera
Date:
Subject: Re: BUG #2085: pg_dump incompletely dumps ACLs
Next
From: "Jim C. Nasby"
Date:
Subject: Re: BUG #2086: Giving error as wrong host and port when connect jdbc