pg.ddx.io  pgsql-docs@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Chad N. Tindel <chad@tindel.net>
Cc: scott.marlowe <scott.marlowe@ihs.com>
Cc: pgsql-docs@postgresql.org
Subject: Re: Mysql -> Postgresql pitfalls
Date: Fri, 01 Aug 2003 22:49:01 -0400
Message-ID: <18494.1059792541@sss.pgh.pa.us> (raw)
In-Reply-To: <20030801205110.GA63709@calma.pair.com>
References: <20030801163555.GA32496@calma.pair.com>
	<Pine.LNX.4.33.0308011426280.30340-100000@css120.ihs.com>
	<20030801205110.GA63709@calma.pair.com>

"Chad N. Tindel" <chad@tindel.net> writes:
> <RANT>As a programmer, I personally would never write code that kept
> people from running things as root.  I mean, what is the point?

If someone roots your box, it's not our fault.  Simple as that.

Personally, I wish more net-accessible servers were written with that
philosophy.  The correct question is NEVER "why can't I run this as
root?".  The correct question is ALWAYS "how can I avoid running this as
root?  And if I can't avoid it, why not?".  Any other approach leads to
Outlook Express.  (BTW, have you forgotten the SQL Server worm already?)

			regards, tom lane



view thread (26+ messages)  latest in thread

Message-ID: <18494.1059792541@sss.pgh.pa.us>
Permalink:  ../18494.1059792541@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/18494.1059792541@sss.pgh.pa.us

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-docs@postgresql.org
  Cc: tgl@sss.pgh.pa.us, chad@tindel.net, scott.marlowe@ihs.com
  Subject: Re: Mysql -> Postgresql pitfalls
  In-Reply-To: <18494.1059792541@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox