Re: [HACKERS] SSL over Unix-domain sockets - Mailing list pgsql-patches

From Bruce Momjian
Subject Re: [HACKERS] SSL over Unix-domain sockets
Date
Msg-id 200801171610.m0HGAlZ25049@momjian.us
Whole thread Raw
In response to Re: [HACKERS] SSL over Unix-domain sockets  (Peter Eisentraut <peter_e@gmx.net>)
Responses Re: [HACKERS] SSL over Unix-domain sockets
Re: [HACKERS] SSL over Unix-domain sockets
List pgsql-patches
Peter Eisentraut wrote:
> Bruce Momjian wrote:
> > I have written the following documentation addition suggesting the use
> > of external_pid_file.
>
> How does that prevent spoofing?

It creates a lock file that is the same name as the socket file that a
default-configured client would use, so it prevents a spoofed socket
from being created.

--
  Bruce Momjian  <bruce@momjian.us>        http://momjian.us
  EnterpriseDB                             http://postgres.enterprisedb.com

  + If your life is a hard drive, Christ can be your backup. +

pgsql-patches by date:

Previous
From: Magnus Hagander
Date:
Subject: Re: minor pgcrypto doc update
Next
From: Tom Lane
Date:
Subject: Re: [HACKERS] SSL over Unix-domain sockets