Bruce Momjian <pgman@candle.pha.pa.us> writes:
> I have an idea for the Unix socket file permissions and local 'trust'
> permissoins as default. Right now we allow the socket permissions to be
> set in postgresql.conf, but that seems like the wrong place for it.
> Suppose we add an option to pg_hba.conf for 'local' connections called
> 'singleuser' and 'singlegroup' which set enable socket permissions
> only for the postgres super-user or his group.
That strikes me as (a) not better, and (b) not backwards compatible.
What's the point?
regards, tom lane
