Re: pgsql-server/src/interfaces/libpq fe-connect.c

Does this patch also check that it's not world-writable?

Chris

> -----Original Message-----
> From: pgsql-committers-owner@postgresql.org
> [mailto:pgsql-committers-owner@postgresql.org]On Behalf Of Bruce Momjian
> - CVS
> Sent: Friday, 30 August 2002 7:07 AM
> To: pgsql-committers@postgresql.org
> Subject: [COMMITTERS] pgsql-server/src/interfaces/libpq fe-connect.c
>
>
> CVSROOT:    /cvsroot
> Module name:    pgsql-server
> Changes by:    momjian@postgresql.org    02/08/29 19:06:32
>
> Modified files:
>     src/interfaces/libpq: fe-connect.c
>
> Log message:
>     > > > > If you want to put in security restrictions that
> are actually useful,
>     > > > > where is the code to verify that PGPASSWORDFILE points at a
>     > > > > non-world-readable file?  That needs to be there
> now, not later, or
>     > > > > we'll have people moaning about backward
> compatibility when we finally
>     > > > > do plug that hole.
>
>     Alvaro Herrera
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 5: Have you checked our extensive FAQ?
>
> http://www.postgresql.org/users-lounge/docs/faq.html
>