X-Original-To: pgsql-docs-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [64.117.224.130])
	by svr1.postgresql.org (Postfix) with ESMTP id D783DD1C9EF
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Sat,  2 Aug 2003 06:34:30 +0000 (GMT)
Received: from svr1.postgresql.org ([64.117.224.193])
	by localhost (neptune.hub.org [64.117.224.130]) (amavisd-new,
	port 10024) with ESMTP id 09906-08
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Sat,  2 Aug 2003 03:33:22 -0300 (ADT)
Received: from brasileiro.net (slxwy.dorms.usu.edu [129.123.227.103])
	by svr1.postgresql.org (Postfix) with ESMTP id 4DC13D1C9EE
	for <pgsql-docs@postgresql.org>; Sat,  2 Aug 2003 03:34:14 -0300 (ADT)
Received: from roberto by brasileiro.net with local (Exim 3.35 #1 (Debian))
	id 19ipxa-0006RF-00; Sat, 02 Aug 2003 00:33:46 -0600
Date: Sat, 2 Aug 2003 00:33:46 -0600
From: Roberto Mello <rmello@cc.usu.edu>
To: "Chad N. Tindel" <chad@tindel.net>
Cc: "scott.marlowe" <scott.marlowe@ihs.com>,
	pgsql-docs@postgresql.org
Subject: Re: Mysql -> Postgresql pitfalls
Message-ID: <20030802063346.GA24640@cc.usu.edu>
References: <20030801163555.GA32496@calma.pair.com>
	<Pine.LNX.4.33.0308011426280.30340-100000@css120.ihs.com>
	<20030801205110.GA63709@calma.pair.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
In-Reply-To: <20030801205110.GA63709@calma.pair.com>
User-Agent: Mutt/1.4i
X-message-flag: Please consider using an e-mail program other than Outlook.
	It's insecure.
X-Virus-Scanned: by amavisd-new at postgresql.org
X-Archive-Number: 200308/8
X-Sequence-Number: 1868

On Fri, Aug 01, 2003 at 04:51:11PM -0400, Chad N. Tindel wrote:
> 
> <RANT>As a programmer, I personally would never write code that kept people from
> running things as root.  I mean, what is the point?  If an administrator

Hmmm? 

The point is something called security.

> wants to run postgresql or apache as root, why shouldn't they be allowed
> to make that conscious decision for themselves?  As it is, you have to recompile

Because administrators have too much to worry about. If an application
makes a conscious decision to allow itself to run in a knowingly insecure
manner, that application is doing the admin a disfavor, and should be
ditched.

> apache with some BIG_SECURITY_HOLE defined in order to run as root, which means
> you can't just use the out of the box apache rpm.  Its so stupid to write
> *extra* code that keeps people from doing something that isn't even 
> fundamentally incorrect.</RANT>

This has no logic. Security is fundamental. No security is fundamentally
incorrect.

-Roberto

-- 
+----|        Roberto Mello   -    http://www.brasileiro.net/  |------+
+       Computer Science Graduate Student, Utah State University      +
+       USU Free Software & GNU/Linux Club - http://fslc.usu.edu/     +
---------------/ NO INSPIRATION TODAY /-------------------