Re: SSL over Unix-domain sockets - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: SSL over Unix-domain sockets
Date
Msg-id 20080115155502.GG4473@alvh.no-ip.org
Whole thread Raw
In response to Re: SSL over Unix-domain sockets  (Tom Lane <tgl@sss.pgh.pa.us>)
Responses Re: SSL over Unix-domain sockets  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-hackers
Tom Lane wrote:
> Alvaro Herrera <alvherre@commandprompt.com> writes:

> > One thing to be aware of is /tmp cleaners ...
> 
> ... but that would definitely be a problem.  I think on most systems
> you'd have to explicitly tweak the /tmp-cleaning script to know not to
> zap such a link.  Given that such a local customization would probably
> disappear in your next system update, the security gain might be
> fleeting.

We could hack the postmaster so that it touches the /tmp socket
(hardcoded path) in addition to the unix_socket_directory one.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


pgsql-hackers by date:

Previous
From: Markus Schiltknecht
Date:
Subject: Re: Declarative partitioning grammar
Next
From: Tom Lane
Date:
Subject: Re: SSL over Unix-domain sockets