Subject: Re: TLS files permissions - how to loosen up PGSQL?
From: lejeczek <peljasz@yahoo.co.uk>
To: pgsql-admin@lists.postgresql.org
References: <5431b332-fdc7-b931-5dfb-99557c13e403.ref@yahoo.co.uk>
 <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
Message-ID: <4941b48c-e0d6-46b2-39ad-b3142432f40d@yahoo.co.uk>
Date: Mon, 5 Apr 2021 18:33:40 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.8.1
MIME-Version: 1.0
In-Reply-To: <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
Content-Length: 765
Archived-At: 
 <https://www.postgresql.org/message-id/4941b48c-e0d6-46b2-39ad-b3142432f40d%40yahoo.co.uk>
Precedence: bulk


On 05/04/2021 18:17, lejeczek wrote:
> Hi guys.
>
> I want to have PGsql to leave access permissions to me, so 
> I could with simple help of 'xatrr' control those 
> permissions.
> You must have seen before:
> ...
>  DETAIL:  File must have permissions u=rw (0600) or less 
> if owned by the database user, or permissions u=rw,g=r 
> (0640) or less if owned by root.
> ...
> Permissions are as:
>
> getfacl: Removing leading '/' from absolute path names
> # file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
> # owner: root
> # group: root
> user::rw-
> user:postgres:r-x
> group::---
> mask::r-x
> other::---
>
> Is it possible, perhaps with use of PGsql configs have it 
> work?
> many thanks, L.
>
>
ah.. I rushed it - no 'x' and PGsql is happy.