pgbackrest - hiding the encryption password - Mailing list pgsql-general

From Ron
Subject pgbackrest - hiding the encryption password
Date
Msg-id 31514690-5a7a-f929-c530-1dc24ac77f27@gmail.com
Whole thread Raw
Responses Re: pgbackrest - hiding the encryption password
Re: pgbackrest - hiding the encryption password
Re: pgbackrest - hiding the encryption password
List pgsql-general
Currently on our RHEL 7.8 system, /etc/pgbackrest.conf is root:root and 633 
perms.  Normally, that's ok, but is a horrible idea when it's a plaintext 
file, and stores the pgbackrest encryption password.

Would pgbackrest (or something else) break if I change it to 
postgres:postgres 600 perms?

Is there a better way of hiding the password so that only user postgres can 
see it?

-- 
Angular momentum makes the world go 'round.



pgsql-general by date:

Previous
From: Ron
Date:
Subject: Re: pgbackrest info of encrypted seems broken
Next
From: David Steele
Date:
Subject: Re: pgbackrest info of encrypted seems broken