Alvaro Herrera <alvherre@commandprompt.com> writes:
> Perhaps the easiest thing to do is to create a (possibly dangling)
> symlink in /tmp to the real socket in a protected dir.
Cute idea ...
> One thing to be aware of is /tmp cleaners ...
... but that would definitely be a problem. I think on most systems
you'd have to explicitly tweak the /tmp-cleaning script to know not to
zap such a link. Given that such a local customization would probably
disappear in your next system update, the security gain might be
fleeting.
regards, tom lane
