Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCWFN-0007sw-3w for pgsql-docs@arkaria.postgresql.org; Fri, 05 Apr 2019 21:19:37 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1hCWFL-0003Dy-R8 for pgsql-docs@arkaria.postgresql.org; Fri, 05 Apr 2019 21:19:35 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCWFL-00039r-HH for pgsql-docs@lists.postgresql.org; Fri, 05 Apr 2019 21:19:35 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCWFJ-0006hY-AA for pgsql-docs@lists.postgresql.org; Fri, 05 Apr 2019 21:19:35 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:MIME-Version:Date: Message-ID:From:References:To:Subject:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=WFb4krjpx3knIzFgNDOOwcFbbEJoiUtP1jDQ1Bb39tw=; b=LeIEmH7yJCWQ5J9Y5lrtSE7Cz6 o3L+/pe4eqcrkZaShYq5vNfxe2k8EeHZjnHi8pJCVUv35Cd78KIP/xN9oUy46uXClRLWK5gWbekY3 xGGzg7c0Eae4wHruzbNpOOstuMoqj7SoAn5NhKVohvhjt96dPJ/ISPVi/NCZC2euSOxYj22a7+FtC ANg7E/orduvT0lCHjT2fQ85lcoIK0/IlqKwoE6CH61/qTH0tm5AZ9NdLw8gy0UqyVC3Pozwlmoyyg kcxkhN5vRoLARxyJcwF+0tUnU2YFS8XPD/ctbyYUIkTBaVSDx8Y71Lxzkx/BUSpG6Rpd2A08qTaxn Aszxi2Pw==; Received: from [63.118.15.50] (helo=Ph33r-Retina.local) by meldrar.postgresql.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1hCWFG-0007IA-K9; Fri, 05 Apr 2019 21:19:33 +0000 Subject: Re: initdb recommendations To: Peter Eisentraut , Pg Docs References: From: "Jonathan S. Katz" Openpgp: preference=signencrypt Autocrypt: addr=jkatz@postgresql.org; keydata= mQINBFtShwABEAC7PNHDUOTYuifpUCk23KqfxdQQkn4nkoxOXRK0+rAj36FiwqGB4TJFuOVZ sDFAEiSlC8Jt4y5Cs7B5tetT8JNd2cs6zp/udMJJDz9d65O9PDpdlMgAmIiTzpLlSdx8FG56 DTksaDv1d8j3cTJPSE4/fWSxqzA7o3Y9UuL7atZPrzfImgpRKs0of7elIHwOa8GucjyhYqcR h60wFBJc2KXqQdDYRTZy43DSnY/0VNc0omiH355fustvpm+m5HjD3w7qZyfN3fpKJpnX1LCF f3MnPHaDGITIYGRCBXvf0UqUtD6OEVWPv2C2gyqWMIpWmZTOgDufltKyIByKBoS9x0PlFkij 04X3KODCngt+N8Ssc9OICc6QSxhjoP48PYPdmiTmkrGuf0LX084wj1xeo1NX7XxZK39F6dTJ DhsIiW0sNS0xMxQHLHG9VLbPjx3SANQBh6BuryPz5ZupW9/TIDmkvprtU/oXfKgtfYm3fxmk EctxbWrEPsFTFPyuMqQu6l+xyQv0s1VLZfjNWaua6H1/gGoIt6kRnn5qMXDVVpijuWkHbv7G ngaQMd258UrrOEHnnjzhQ7jxMWV9D+emxbAtlIxnYvCWlV4IwAQhEHfvudqYaIY3hNWrvQ6H GB2KXoTZYN9g5djm14/5nj1IU5zOcovkjJnKhoo9iStnpFF2cwARAQABtCdKb25hdGhhbiBT LiBLYXR6IDxqa2F0ekBwb3N0Z3Jlc3FsLm9yZz6JAlQEEwEIAD4CGwMFCQeGH4AFCwkIBwIG FQoJCAsCBBYCAwECHgECF4AWIQT6hLaVryv3miBkP/HxBJxynxxlJwUCW1KJJQAKCRDxBJxy nxxlJwjrD/kBgqsW4QpNpTFw7ifRokZV08CCX4huPBJQ91rrv+UEWlEcotFBHVkYyHnpzARl tcZxhJ9CbFxjniH9cOTty5T/O1yolbOHtZSW8Z8aWV6BVEbjMb+BFxSSLm7RnvJdzQbGCZq2 ZZvfVpB6z3EHYph4KDdVKvMFjoLskxmdS1DE0tE3zTxvoQsi24Q+HOS07kUjs6fsu/WICMfz mgO++AWG9Y0CvN0mm4TkujESzyKM9E5irD+leEMIcddl51Aa2c/VMfBXQbRmpHIgUFTmuHQD CnQih+9i3OJAksDg66SP8a7yiXv5mwvyDi1EfTGVKYR2j+pwyjwnC3oIbvDMmB3uTn2JIjnT iZKPVtAcAylXjubFltihQgNyuShdP4W+kBwZizhUFqUVL8Anx+KoytYmJPfMRFLGuK4obXKq a2ZS3k9KB+H+isOx2nFJOsc7V360Zp1DVaNmuiK10TT6QndShSPaqkJqFtCb6r92rZ9sZM/L 3vtCI4Rrl3Pt1MgtENXupS8gZpJnAYS0j5A1PAZ09r6ANoaeMHspF+5J5fOHeEvqphXr36mm a83Vl1t4orPb0+QmmijmlpseDU63M88Aw5p3c4qj7t8Qr2EZ5zrn7/sFn5wOfbs8Nymxafif QCnlV2vg9p0m7vSk/yLJ4PFZvs52FgqAGRCdRn0s2EC99bkCDQRbUocAARAAv8ho/toQ9DG3 j4f9h9n1aRHr2FlviN2Utpy6L8+dfDggO0geilmkGQOolZ2E60gGfye/kUtF9W3NByO4hxDR 9u6qbOXcdqnuA+cc68EfqlWFJrVtYFxt0h4ElWYOYnIezKthriWch/FY70FGrxs3z8UHOHq5 0wBW433eTvZm90WixBiXEt2v1DgW4Vr3ymfO7Aap/IYyPuE4JzgudAuAl0HKPyNEHWHG1dAb jX1RiCw9gknIDWQOF0B4UAaJctWGVcnZ3A2ULwNGMa1P9ZJlBWf1vcj01aiHMU0yQ7JjJiSp vfm9eM0uSLwRdDrJjyl5ZZqVumjdv2SMNQ8GvYRbEMys3GGDSt9zXgfCSUnPnJfYxjzBHRI6 x44Wfsx8S6hWxepOogCJJ/g67Bk9mY8YV4klWIXDJVOL5jnBC09DbsZG81JaE2QxB8Y7W36Z Mroi9XMxg3s805hQAQUvdG/poU8hN8BWdrnTm/+4eQQp7gDY1ePDmGM6bJC+OHOSnFtR/f+7 0zpKJ10cc7cBygGnl1yR3KjhFyAWUFvP4ZGziKCcpMwXZfe9PGuyA/YOubMphxIn3YsK2wrd faKZYX2GMZCZhMMcvx9IpQrxIJgU+VlwXu/O+Lk10VIPcxPJJwmpdI6HzcS8ZgG6IMcC444X XTuLaP8j2mgcMvYak3ScCykAEQEAAYkCPAQYAQgAJhYhBPqEtpWvK/eaIGQ/8fEEnHKfHGUn BQJbUocAAhsMBQkHhh+AAAoJEPEEnHKfHGUnReMP/RA2UhGQj+G4uBshkRLjpRysabdPqgQB dEBk6wYbio88Wg/2/hgY7UzmDDEwX3sZfQDcrI6+vIobI8uqstZID+WgAAa1JLfChMyVQnSy 0zfWMOABXscc5tGuvFRZvJklTissMFjXUwaREEKp4ZikTvJ/62MCjSdtrUhnPLvoTsHTKRKD ichE+b5A54alwsubTijw12O6N22r5IjZiiSZV0u7dsShyKw+7wCSax9fuBoE43NMYf+dnjMK nerAQYUcZWYMnk+EC8RaqYAxv6XZ2tKx1AkGGktwkQIBwrz9IlDSvJ3LWJ2UIIuLRTdngNgg GIL4zzuUa2F56FqskQIuYMaNETk6LYfalBDQ6TVLAcgCPQxp4k4i/PRsZ3lZ2ZhRHRYciOvm kp+I6EfHwllQpYrWs1thluBGqlJSVJgKl0IOFvKLsQ6KKfqzAwh6FxrO5qajp4viNIgtWoFw O5Bp0jgFTbH2OrMWIRfUdUCH1Djbuo65svhNj7FNsQVYzHDI+Nd1I/LOBoPc3UorRMF2M4JV kUR7skOHWUbPTSNUr7qc14NSMY3PKjGeVGAsBVHBPvmRx/Ss2tW/TpJWpxg4pmquFQSXuaYh Yf4FN8Sxy320pcr+FqN8AhZkYJcNY82OTtR5VEKRC/mYcyq61qXIKqngydn79bJjGxHipxyF FmEC Message-ID: <2c8ff892-16fd-7f12-e123-e2338096199c@postgresql.org> Date: Fri, 5 Apr 2019 17:19:28 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:60.0) Gecko/20100101 Thunderbird/60.6.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="9dlsjJwElf3ElrtX9EYSYdYzjPglk0PGT" X-Host-Lookup-Failed: Reverse DNS lookup failed for 63.118.15.50 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --9dlsjJwElf3ElrtX9EYSYdYzjPglk0PGT Content-Type: multipart/mixed; boundary="JFSQQMUH2y1aWvEsrG4GMxto4OK5K40HD"; protected-headers="v1" From: "Jonathan S. Katz" To: Peter Eisentraut , Pg Docs Message-ID: <2c8ff892-16fd-7f12-e123-e2338096199c@postgresql.org> Subject: Re: initdb recommendations References: In-Reply-To: --JFSQQMUH2y1aWvEsrG4GMxto4OK5K40HD Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 4/5/19 4:58 PM, Peter Eisentraut wrote: > On 2019-04-05 18:11, Jonathan S. Katz wrote: >> (There could be an additional discussion about whether or not we want = to >> change the default behavior for initdb, but I would suggest that a saf= e >> starting point would be to ensure we call this out) >=20 > I think we should just change the defaults. There is a risk of warning= > fatigue. initdb does warn about this, so anyone who cared could have > gotten the information. It might actually be a combination of both updating the defaults and modifying the documentation. If we introduce better defaults, we'll need an explanation of what the defaults are and why they are as such. If we don't, we certainly need to warn the user what's happening. The way it's currently written, it's very easy to miss. I also don't see how it's warning fatigue when it's both a) a feature that could put your system into a vulnerable state if you're not careful and b) the only warning on that page. Jonathan --JFSQQMUH2y1aWvEsrG4GMxto4OK5K40HD-- --9dlsjJwElf3ElrtX9EYSYdYzjPglk0PGT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE+oS2la8r95ogZD/x8QSccp8cZScFAlynxmAACgkQ8QSccp8c ZSegTRAAqqGVkHS5thVKmvPSaFByfB/sNpcAL7VjhKLRCGJmx9VUcK2rSPvdKU+0 HI1DEyR5nxRkeqw6kKOyIlmX8isbvn2ynO+D+UviK1npx5g4RyXbdudEH5ric+Lk p9tDh2UxzKqgmeBKMgdr1ZMkFSyKTBNXDVu7sQu6mjPoYt8/RyrU99LiZ6hG3/6R SWpSDHD+tLj80aEWsMMBke6LH900tcwTrMDTiMGZMNOUX5v20zNcMkNeh8VSNCb3 5mH/Fj8g9+DGhkba3mk94txUPpQsdZom7RXx/lrb1B00IBXOJgMTWNpCRwr32xuv ohZCJi6X2pI8jLWD7uu3aTiW0cenzTh5YvJPYTm2K2PNpGSMBvA0GHv85au25PcF VgBxJ485gPoFiutigVtvY67s9Tl9SAf4zoOSbdmFECWm/WSZISV2UfdVgho+Kqva 8Y1qNIgmvKYZEuJKJ2JEa6EZzSDvcOOmUqZ9fVISp5Sb93eV+j1XvAWjuvCuG7aJ 7oGMmP/zPC1IwACPaR2BRTYFzSlQIfjnnZOLdTk2pDHYjl6s8DxrAQmY5tukH8ez hq7jzGfg6CXt009mpwMMbUZHeMMQctwp5UNdPGyvF8Kv7NdT3qAjyKfA5IROt1hJ SosoC/Lhh+od/6tVB55wYUhlLj/15P55kduxH1u9GAtSfUafRDc= =aSQd -----END PGP SIGNATURE----- --9dlsjJwElf3ElrtX9EYSYdYzjPglk0PGT--