Received: from localhost (unknown [200.46.204.191]) by postgresql.org (Postfix) with ESMTP id A6D722E379A for ; Thu, 17 Jan 2008 10:37:34 -0400 (AST) Received: from postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.191]) (amavisd-maia, port 10024) with ESMTP id 95016-01 for ; Thu, 17 Jan 2008 10:37:30 -0400 (AST) Received: from tamriel.snowman.net (tamriel.snowman.net [72.66.115.51]) by postgresql.org (Postfix) with ESMTP id E60752E36F9 for ; Thu, 17 Jan 2008 10:37:30 -0400 (AST) Received: by tamriel.snowman.net (Postfix, from userid 1000) id 3B9F68407B; Thu, 17 Jan 2008 09:37:29 -0500 (EST) Date: Thu, 17 Jan 2008 09:37:29 -0500 From: Stephen Frost To: Tom Lane Cc: "Marc G. Fournier" , pgsql-hackers@postgreSQL.org Subject: Re: [ADMIN] postgresql in FreeBSD jails: proposal Message-ID: <20080117143729.GR5031@tamriel.snowman.net> Mail-Followup-To: Tom Lane , "Marc G. Fournier" , pgsql-hackers@postgreSQL.org References: <1200501702.478e33c61b74e@webmail.telus.net> <4089.1200550374@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="R7Cw32JRT2J/IcDG" Content-Disposition: inline In-Reply-To: <4089.1200550374@sss.pgh.pa.us> X-Editor: Vim http://www.vim.org/ X-Info: http://www.snowman.net X-Operating-System: Linux/2.6.22-2-amd64 (x86_64) X-Uptime: 09:04:52 up 108 days, 14:17, 27 users, load average: 0.01, 0.05, 0.00 User-Agent: Mutt/1.5.16 (2007-06-11) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200801/694 X-Sequence-Number: 112968 --R7Cw32JRT2J/IcDG Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable * Tom Lane (tgl@sss.pgh.pa.us) wrote: > "Marc G. Fournier" writes: > > Easiest fix: change the UID of the user running the postmaster (ie. pgs= ql) so > > that each runs as a distinct UID (instead of distinct PGPORT) ... been = doing=20 > > this since moving to FreeBSD 6.x ... no patches required ... >=20 > Sure, but in the spirit of "belt and suspenders too", I'd think that > doing that *and* something like Mischa's proposal wouldn't be bad. I agree that we should try to be careful about stepping on segments that might still be in use, but I would also discourage jail users from using the same uid for multiple PG clusters since the jail doesn't protect the shmem segment. We use seperate uids even w/ linux-vservers where shmem and everything *is* seperate, following the same 'belt and suspenders too' spirit for security. Thanks, Stephen --R7Cw32JRT2J/IcDG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHj2gorzgMPqB3kigRArWvAJ0co6inn64SzSe79NEbSbjlSTYFewCgiM4a Pt5S/nHlVREtM9XLbQQmPbY= =oJ/W -----END PGP SIGNATURE----- --R7Cw32JRT2J/IcDG--