X-Original-To: pgsql-docs-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [64.117.224.130])
	by svr1.postgresql.org (Postfix) with ESMTP id B107AD1C4BD
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Sat,  2 Aug 2003 02:49:00 +0000 (GMT)
Received: from svr1.postgresql.org ([64.117.224.193])
	by localhost (neptune.hub.org [64.117.224.130]) (amavisd-new,
	port 10024) with ESMTP id 89998-03
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Fri,  1 Aug 2003 23:47:55 -0300 (ADT)
Received: from sss.pgh.pa.us (unknown [192.204.191.242])
	by svr1.postgresql.org (Postfix) with ESMTP id 95FADD1C4BF
	for <pgsql-docs@postgresql.org>; Fri,  1 Aug 2003 23:48:58 -0300 (ADT)
Received: from sss2.sss.pgh.pa.us (tgl@localhost [127.0.0.1])
	by sss.pgh.pa.us (8.12.9/8.12.9) with ESMTP id h722n1Q3018495;
	Fri, 1 Aug 2003 22:49:01 -0400 (EDT)
To: "Chad N. Tindel" <chad@tindel.net>
Cc: "scott.marlowe" <scott.marlowe@ihs.com>,
	pgsql-docs@postgresql.org
Subject: Re: Mysql -> Postgresql pitfalls 
In-reply-to: <20030801205110.GA63709@calma.pair.com> 
References: <20030801163555.GA32496@calma.pair.com>
	<Pine.LNX.4.33.0308011426280.30340-100000@css120.ihs.com>
	<20030801205110.GA63709@calma.pair.com>
Comments: In-reply-to "Chad N. Tindel" <chad@tindel.net>
	message dated "Fri, 01 Aug 2003 16:51:11 -0400"
Date: Fri, 01 Aug 2003 22:49:01 -0400
Message-ID: <18494.1059792541@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
X-Virus-Scanned: by amavisd-new at postgresql.org
X-Archive-Number: 200308/7
X-Sequence-Number: 1867

"Chad N. Tindel" <chad@tindel.net> writes:
> <RANT>As a programmer, I personally would never write code that kept
> people from running things as root.  I mean, what is the point?

If someone roots your box, it's not our fault.  Simple as that.

Personally, I wish more net-accessible servers were written with that
philosophy.  The correct question is NEVER "why can't I run this as
root?".  The correct question is ALWAYS "how can I avoid running this as
root?  And if I can't avoid it, why not?".  Any other approach leads to
Outlook Express.  (BTW, have you forgotten the SQL Server worm already?)

			regards, tom lane