X-Original-To: pgsql-docs-postgresql.org@localhost.postgresql.org
Received: from localhost (unknown [64.117.224.130])
	by svr1.postgresql.org (Postfix) with ESMTP id 678C6D1C98F
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Sat,  2 Aug 2003 17:04:12 +0000 (GMT)
Received: from svr1.postgresql.org ([64.117.224.193])
	by localhost (neptune.hub.org [64.117.224.130]) (amavisd-new,
	port 10024) with ESMTP id 41007-06
	for <pgsql-docs-postgresql.org@localhost.postgresql.org>;
	Sat,  2 Aug 2003 14:03:01 -0300 (ADT)
Received: from calma.pair.com (calma.pair.com [209.68.1.95])
	by svr1.postgresql.org (Postfix) with SMTP id 615A8D1C509
	for <pgsql-docs@postgresql.org>; Sat,  2 Aug 2003 14:04:10 -0300 (ADT)
Received: (qmail 12951 invoked by uid 3059); 2 Aug 2003 17:04:10 -0000
Date: Sat, 2 Aug 2003 13:04:10 -0400
From: "Chad N. Tindel" <chad@tindel.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-docs@postgresql.org
Subject: Re: Mysql -> Postgresql pitfalls
Message-ID: <20030802170410.GA12300@calma.pair.com>
References: <20030801163555.GA32496@calma.pair.com>
	<Pine.LNX.4.33.0308011426280.30340-100000@css120.ihs.com>
	<20030801205110.GA63709@calma.pair.com>
	<18494.1059792541@sss.pgh.pa.us>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <18494.1059792541@sss.pgh.pa.us>
User-Agent: Mutt/1.4i
X-Virus-Scanned: by amavisd-new at postgresql.org
X-Archive-Number: 200308/10
X-Sequence-Number: 1870

> > <RANT>As a programmer, I personally would never write code that kept
> > people from running things as root.  I mean, what is the point?
> 
> If someone roots your box, it's not our fault.  Simple as that.

I didn't say "require them to run as a non-root user".  I said "Give them
the choice to decide what is correct for their environment".  In the case
of apache, there are many internal webservers that are not exposed to the
threat of the public internet; for such servers, it may be appropriate to run
apache as root because it simplifies the administration and automation of 
tasks.  But to do so, one has to know how to re-compile apache, which will
exclude a lot of your basic garden variety administrators.  Its very
un-friendly programming.

Chad