Re: [HACKERS] SSL over Unix-domain sockets - Mailing list pgsql-patches

From Peter Eisentraut
Subject Re: [HACKERS] SSL over Unix-domain sockets
Date
Msg-id 200801181122.42173.peter_e@gmx.net
Whole thread Raw
In response to Re: [HACKERS] SSL over Unix-domain sockets  (Bruce Momjian <bruce@momjian.us>)
List pgsql-patches
Am Donnerstag, 17. Januar 2008 schrieb Bruce Momjian:
> It creates a lock file that is the same name as the socket file that a
> default-configured client would use, so it prevents a spoofed socket
> from being created.

A counter-spoofing solution must be implemented in the client.  No moving
around of files by the server will ever solve the problem.

--
Peter Eisentraut
http://developer.postgresql.org/~petere/

pgsql-patches by date:

Previous
From: Greg Smith
Date:
Subject: Re: [HACKERS] SSL over Unix-domain sockets
Next
From: Peter Eisentraut
Date:
Subject: Re: [HACKERS] SSL over Unix-domain sockets