pg.ddx.io pgsql-admin@postgresql.org mailing list archive
help / color / mirror / Atom feedTLS files permissions - how to loosen up PGSQL?
2+ messages / 1 participants
[nested] [flat]
* TLS files permissions - how to loosen up PGSQL?
@ 2021-04-05 17:17 lejeczek <peljasz@yahoo.co.uk>
0 siblings, 1 reply; 2+ messages in thread
From: lejeczek @ 2021-04-05 17:17 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
Hi guys.
I want to have PGsql to leave access permissions to me, so I
could with simple help of 'xatrr' control those permissions.
You must have seen before:
...
DETAIL: File must have permissions u=rw (0600) or less if
owned by the database user, or permissions u=rw,g=r (0640)
or less if owned by root.
...
Permissions are as:
getfacl: Removing leading '/' from absolute path names
# file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
# owner: root
# group: root
user::rw-
user:postgres:r-x
group::---
mask::r-x
other::---
Is it possible, perhaps with use of PGsql configs have it work?
many thanks, L.
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: TLS files permissions - how to loosen up PGSQL?
@ 2021-04-05 17:33 lejeczek <peljasz@yahoo.co.uk>
parent: lejeczek <peljasz@yahoo.co.uk>
0 siblings, 0 replies; 2+ messages in thread
From: lejeczek @ 2021-04-05 17:33 UTC (permalink / raw)
To: pgsql-admin@lists.postgresql.org
On 05/04/2021 18:17, lejeczek wrote:
> Hi guys.
>
> I want to have PGsql to leave access permissions to me, so
> I could with simple help of 'xatrr' control those
> permissions.
> You must have seen before:
> ...
> DETAIL: File must have permissions u=rw (0600) or less
> if owned by the database user, or permissions u=rw,g=r
> (0640) or less if owned by root.
> ...
> Permissions are as:
>
> getfacl: Removing leading '/' from absolute path names
> # file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
> # owner: root
> # group: root
> user::rw-
> user:postgres:r-x
> group::---
> mask::r-x
> other::---
>
> Is it possible, perhaps with use of PGsql configs have it
> work?
> many thanks, L.
>
>
ah.. I rushed it - no 'x' and PGsql is happy.
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2021-04-05 17:33 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2021-04-05 17:17 TLS files permissions - how to loosen up PGSQL? lejeczek <peljasz@yahoo.co.uk>
2021-04-05 17:33 ` lejeczek <peljasz@yahoo.co.uk>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox