Re: Spoofing as the postmaster

Kurt Roeckx <kurt@roeckx.be> writes:
> On Sun, Dec 23, 2007 at 02:52:28PM -0500, Tom Lane wrote:
>> a feature.  It would be completely inappropriate for us as upstream to
>> destroy that property, and my fundamental objection to what Debian
>> has done is that they've destroyed that property at the distro level.

> The default postgresql.conf in Debian contains a line like this:
> unix_socket_directory = '/var/run/postgresql'

> I don't understand what restriction you mean.  What was changed is the
> default location of the unix domain socket.  If you still want it in
> /tmp, you can put it there.

Not as easily as all that, because the system copy of libpq.so has the
other directory hard-wired into it.  Yes, you can sort of make it work
if you have to, but it's inconvenient and error-prone.

> I think there are basicly two reasons to move it:
> - It's insecure, as this thread shows
> - The FHS says the they should be placed in /var/run/, probably
>   for the first reason.

We've had that discussion before.
        regards, tom lane