Re: sudo/access to the postres OS user - Mailing list pgsql-novice

From Luca Ferrari
Subject Re: sudo/access to the postres OS user
Date
Msg-id CAKoxK+5N4mrRRvLmd_=hv=T=b906Cf1V=1YZ7eQJwE-brX=JBQ@mail.gmail.com
Whole thread Raw
In response to Re: sudo/access to the postres OS user  ("Birchall, Austen" <austen.birchall@metoffice.gov.uk>)
Responses Re: sudo/access to the postres OS user
List pgsql-novice
On Fri, Aug 16, 2013 at 5:01 PM, Birchall, Austen
<austen.birchall@metoffice.gov.uk> wrote:

> However for a 24/7 WAL mode database would I need access to the contents of
> the pg_xlog directory?
>
>
>
> Also it I need to do a PITR wouldn’t I need rw access to just about
> everything?
>

Well, the recovery is performed by PostgreSQL itself, so the short
answer is no. You need access to the recovery.conf file and, to some
extent, to the wal archiving space for cleanup and maintenance.
Now it should be interesting to know what you are allowed to do,
because if you have access only to "psql" executable via sudo then
you'll not be able to do a pitr (you need to control the cluster). If
you have the capability to launch a text editor (e.g., Emacs) you
could be able to run a shell (or a shell command) from within that.
If protection is the aim then the cluster has to be carefully set up
(with directory and permissions splitted) so that you can have access
to the objects you need.

Luca


pgsql-novice by date:

Previous
From: Athanasios Kostopoulos
Date:
Subject: Re: parsing pg_dump -l output
Next
From: Athanasios Kostopoulos
Date:
Subject: Re: sudo/access to the postres OS user