From: Dischner, Anton <Anton.Dischner@med.uni-muenchen.de>
To: Joe Bloggs <joebloggs122021@gmail.com>
Cc: pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: AW: MacOS Application Security
Date: Mon, 13 Dec 2021 12:25:31 +0000
Message-ID: <e625b0fa49b84df6b077b1769a92c833@MITMB5.helios.med.uni-muenchen.de> (raw)
In-Reply-To: <CALLWS71RY8x7FDeAGwDCmrtu5XuJY8p6vf8+dCtfx8+s_upcZg@mail.gmail.com>
References: <CALLWS71RY8x7FDeAGwDCmrtu5XuJY8p6vf8+dCtfx8+s_upcZg@mail.gmail.com>
Hi Joe,
please tell us more what you want to do with PG: Learning/Production/Production mission critical/small/medium/large.
Are you a Unix/Linux man or an Apple user?
How do you want to do your backups Time machine i guess,
Installing an App vs Homebrew are complete different worlds. Ist wise to do some investigation now before you proceed,
best,
Anton
Von: Joe Bloggs <joebloggs122021@gmail.com>
Gesendet: Montag, 13. Dezember 2021 13:13
An: pgsql-admin@postgresql.org
Betreff: MacOS Application Security
Hi,
From what I'm reading, you need to create a user with the bare minimum of rights to install and use PostgreSQL for security reasons. Question is, when you install PostgreSQL on a Mac using the Postgres.app and then you go to the data folder with the cluster and have a look at the permissions, my computer name user (I'm guessing an admin of some sort) is plastered across everything. Is the Postgres.app inherently less secure? Is using the Homebrew approach a better idea? Or should I just manually set permissions after the app is installed?
Thanks!
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Anton.Dischner@med.uni-muenchen.de, joebloggs122021@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: AW: MacOS Application Security
In-Reply-To: <e625b0fa49b84df6b077b1769a92c833@MITMB5.helios.med.uni-muenchen.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox