From: lejeczek <peljasz@yahoo.co.uk>
To: pgsql-admin@lists.postgresql.org
Subject: Re: TLS files permissions - how to loosen up PGSQL?
Date: Mon, 5 Apr 2021 18:33:40 +0100
Message-ID: <4941b48c-e0d6-46b2-39ad-b3142432f40d@yahoo.co.uk> (raw)
In-Reply-To: <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
References: <5431b332-fdc7-b931-5dfb-99557c13e403.ref@yahoo.co.uk>
<5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
On 05/04/2021 18:17, lejeczek wrote:
> Hi guys.
>
> I want to have PGsql to leave access permissions to me, so
> I could with simple help of 'xatrr' control those
> permissions.
> You must have seen before:
> ...
> DETAIL: File must have permissions u=rw (0600) or less
> if owned by the database user, or permissions u=rw,g=r
> (0640) or less if owned by root.
> ...
> Permissions are as:
>
> getfacl: Removing leading '/' from absolute path names
> # file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
> # owner: root
> # group: root
> user::rw-
> user:postgres:r-x
> group::---
> mask::r-x
> other::---
>
> Is it possible, perhaps with use of PGsql configs have it
> work?
> many thanks, L.
>
>
ah.. I rushed it - no 'x' and PGsql is happy.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: peljasz@yahoo.co.uk, pgsql-admin@lists.postgresql.org
Subject: Re: TLS files permissions - how to loosen up PGSQL?
In-Reply-To: <4941b48c-e0d6-46b2-39ad-b3142432f40d@yahoo.co.uk>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox