Oliver Elphick <olly@lfix.co.uk> writes:
>> Marc's idea of matching signature files would be a better
>> safety-checking mechanism than just making the data directory's xlog
>> link hard to get at.
> I would like to have Marc's safeguards as well.
Yeah, I was lukewarm about that at first, but the more I think about it
the better it seems.
That does not change my opinion about the -X/PGXLOG switch though ---
having a backup safety check is not an excuse for having a fundamentally
insecure set of startup options.
regards, tom lane
