From: lejeczek <peljasz@yahoo.co.uk>
To: pgsql-admin@lists.postgresql.org
Subject: TLS files permissions - how to loosen up PGSQL?
Date: Mon, 5 Apr 2021 18:17:44 +0100
Message-ID: <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk> (raw)
References: <5431b332-fdc7-b931-5dfb-99557c13e403.ref@yahoo.co.uk>
Hi guys.
I want to have PGsql to leave access permissions to me, so I
could with simple help of 'xatrr' control those permissions.
You must have seen before:
...
DETAIL: File must have permissions u=rw (0600) or less if
owned by the database user, or permissions u=rw,g=r (0640)
or less if owned by root.
...
Permissions are as:
getfacl: Removing leading '/' from absolute path names
# file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
# owner: root
# group: root
user::rw-
user:postgres:r-x
group::---
mask::r-x
other::---
Is it possible, perhaps with use of PGsql configs have it work?
many thanks, L.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: peljasz@yahoo.co.uk, pgsql-admin@lists.postgresql.org
Subject: Re: TLS files permissions - how to loosen up PGSQL?
In-Reply-To: <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox