pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed

file permissions for /usr/bin/postgres
3+ messages / 2 participants
[nested] [flat]

* file permissions for /usr/bin/postgres
@ 2011-07-07 17:17  Smith, Andy V  <andy.v.smith@citi.com>
  0 siblings, 1 reply; 3+ messages in thread

From: Smith, Andy V @ 2011-07-07 17:17 UTC (permalink / raw)
  To: pgsql-admin

Hi

Can someone please advise what the most secure permissions are allowed for /usr/bin/postgres ?
At the moment we have:

-bash-3.2# ls -lt /usr/bin/postgres
-rwxr-xr-x 1 root root 4574696 Jan 28 19:31 /usr/bin/postgres

This is not considered secure.

Regards,

Andy V Smith
Global Database Engineering
Citi Architecture & Technology Engineering (CATE)
Office +44 207-500-8068
Level 6, CGC1 | 25 Canada Square, Canary Wharf, | London E14 5LB


[cid:image001.gif@01CC3CCD.F18F89E0]

Attachments:

image001.gif (image/gif, 1.7K) download
  view image

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: file permissions for /usr/bin/postgres
@ 2011-07-07 17:29  Smith, Andy V  <andy.v.smith@citi.com>
  0 siblings, 0 replies; 3+ messages in thread

From: Smith, Andy V @ 2011-07-07 17:29 UTC (permalink / raw)
  To: pgsql-admin


Hi

Can someone please advise what the most secure permissions are allowed for /usr/bin/postgres ?
At the moment we have:

-bash-3.2# ls -lt /usr/bin/postgres
-rwxr-xr-x 1 root root 4574696 Jan 28 19:31 /usr/bin/postgres

This is not considered secure.

Regards,

Andy V Smith
Global Database Engineering
Citi Architecture & Technology Engineering (CATE)
Office +44 207-500-8068
Level 6, CGC1 | 25 Canada Square, Canary Wharf, | London E14 5LB


[cid:image001.gif@01CC3CD3.D94733F0]

Attachments:

image001.gif (image/gif, 1.7K) download
  view image

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: file permissions for /usr/bin/postgres
@ 2011-07-13 15:40  Tom Lane <tgl@sss.pgh.pa.us>
  parent: Smith, Andy V  <andy.v.smith@citi.com>
  0 siblings, 0 replies; 3+ messages in thread

From: Tom Lane @ 2011-07-13 15:40 UTC (permalink / raw)
  To: Smith, Andy V <andy.v.smith@citi.com>; +Cc: pgsql-admin

"Smith, Andy V " <andy.v.smith@citi.com> writes:
> Can someone please advise what the most secure permissions are allowed for /usr/bin/postgres ?
> At the moment we have:

> -bash-3.2# ls -lt /usr/bin/postgres
> -rwxr-xr-x 1 root root 4574696 Jan 28 19:31 /usr/bin/postgres

> This is not considered secure.

"Not considered secure" by whom, and on what grounds?  Those are pretty
much the standard permission settings for any executable in /usr/bin.
What threat do you suppose you'll ameliorate by changing them?

			regards, tom lane



^ permalink  raw  reply  [nested|flat] 3+ messages in thread

end of thread, other threads:[~2011-07-13 15:40 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2011-07-07 17:17 file permissions for /usr/bin/postgres Smith, Andy V  <andy.v.smith@citi.com>
2011-07-13 15:40 ` Tom Lane <tgl@sss.pgh.pa.us>
2011-07-07 17:29 Re: file permissions for /usr/bin/postgres Smith, Andy V  <andy.v.smith@citi.com>

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox