Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 14D8AB5DC45 for ; Wed, 13 Jul 2011 12:41:11 -0300 (ADT) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 45573-10 for ; Wed, 13 Jul 2011 15:41:00 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from sss.pgh.pa.us (sss.pgh.pa.us [66.207.139.130]) by mail.postgresql.org (Postfix) with ESMTP id 3AC48B5DC44 for ; Wed, 13 Jul 2011 12:41:00 -0300 (ADT) Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1]) by sss.pgh.pa.us (8.14.2/8.14.2) with ESMTP id p6DFewvn005211; Wed, 13 Jul 2011 11:40:58 -0400 (EDT) To: "Smith, Andy V " cc: "'pgsql-admin@postgresql.org'" Subject: Re: file permissions for /usr/bin/postgres In-reply-to: <4F245A072491544EB83F085AD6AADFC7011B9DEE07@exlnmb02.eur.nsroot.net> References: <4F245A072491544EB83F085AD6AADFC7011B9DEE07@exlnmb02.eur.nsroot.net> Comments: In-reply-to "Smith, Andy V " message dated "Thu, 07 Jul 2011 18:17:47 +0100" Date: Wed, 13 Jul 2011 11:40:58 -0400 Message-ID: <5210.1310571658@sss.pgh.pa.us> From: Tom Lane X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01 X-Spam-Level: X-Archive-Number: 201107/89 X-Sequence-Number: 37868 "Smith, Andy V " writes: > Can someone please advise what the most secure permissions are allowed for /usr/bin/postgres ? > At the moment we have: > -bash-3.2# ls -lt /usr/bin/postgres > -rwxr-xr-x 1 root root 4574696 Jan 28 19:31 /usr/bin/postgres > This is not considered secure. "Not considered secure" by whom, and on what grounds? Those are pretty much the standard permission settings for any executable in /usr/bin. What threat do you suppose you'll ameliorate by changing them? regards, tom lane