To: pgsql-admin@lists.postgresql.org
From: lejeczek <peljasz@yahoo.co.uk>
Subject: TLS files permissions - how to loosen up PGSQL?
Message-ID: <5431b332-fdc7-b931-5dfb-99557c13e403@yahoo.co.uk>
Date: Mon, 5 Apr 2021 18:17:44 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
 Thunderbird/78.8.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Content-Language: en-US
References: <5431b332-fdc7-b931-5dfb-99557c13e403.ref@yahoo.co.uk>
Content-Length: 625
Archived-At: 
 <https://www.postgresql.org/message-id/5431b332-fdc7-b931-5dfb-99557c13e403%40yahoo.co.uk>
Precedence: bulk

Hi guys.

I want to have PGsql to leave access permissions to me, so I 
could with simple help of 'xatrr' control those permissions.
You must have seen before:
...
  DETAIL:  File must have permissions u=rw (0600) or less if 
owned by the database user, or permissions u=rw,g=r (0640) 
or less if owned by root.
...
Permissions are as:

getfacl: Removing leading '/' from absolute path names
# file: etc/pki/easy-rsa/pki/private/c8kubernode2.private.key
# owner: root
# group: root
user::rw-
user:postgres:r-x
group::---
mask::r-x
other::---

Is it possible, perhaps with use of PGsql configs have it work?
many thanks, L.