All,
* Peter Eisentraut (peter.eisentraut@2ndquadrant.com) wrote:
> On 12/6/16 9:53 PM, Tom Lane wrote:
> > I think we should give serious consideration to back-patching commit
> > ecb0d20a9, which changed the default semaphore type to unnamed-POSIX
> > on Linux.
>
> Even with that change, dynamic shared memory is still vulnerable to be
> removed. So backpatching the semaphore change wouldn't achieve any new
> level of safety for users so that we could tell them, "you're good now".
I tend to agree with Peter, Magnus, and Craig on this. If you aren't
running PG as a system user on a system where systemd feels happy to
kill processes and remove shared memory segments and semaphores when you
log out, no amount of back-patching of anything is going to make you
'safe'. As noted in the thread referenced, users who are trying to
(mistakenly) do this are already having to modify their logind.conf file
to not have PG outright killed when they log out, it's on them to make
sure systemd doesn't do other stupid things when they log out too if
they really want PG to be run as their user account.
Thanks!
Stephen
