Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ubOZl-000IoO-2r for pgsql-general@arkaria.postgresql.org; Mon, 14 Jul 2025 19:10:57 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1ubOZj-00C43J-6F for pgsql-general@arkaria.postgresql.org; Mon, 14 Jul 2025 19:10:55 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1ubOZi-00C41Y-SH for pgsql-general@lists.postgresql.org; Mon, 14 Jul 2025 19:10:55 +0000 Received: from sss.pgh.pa.us ([68.162.161.243]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1ubOZh-007hDE-16 for pgsql-general@lists.postgresql.org; Mon, 14 Jul 2025 19:10:55 +0000 Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1]) by sss.pgh.pa.us (8.15.2/8.15.2) with ESMTP id 56EJAjiV712599; Mon, 14 Jul 2025 15:10:45 -0400 From: Tom Lane To: Benjamin Wang cc: "Peter J. Holzer" , pgsql-general@lists.postgresql.org Subject: Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS) In-reply-to: References: <13e3100fc7c7d14919c37943dcfd76b263cecce2.camel@cybertec.at> <609925.1752502040@sss.pgh.pa.us> <20250714182016.23ypyxgtq6vbgl4c@hjp.at> <708241.1752517845@sss.pgh.pa.us> Comments: In-reply-to Benjamin Wang message dated "Mon, 14 Jul 2025 20:02:27 +0100" MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <712597.1752520245.1@sss.pgh.pa.us> Date: Mon, 14 Jul 2025 15:10:45 -0400 Message-ID: <712598.1752520245@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Benjamin Wang writes: > I am not sure whether PostgreSQL depends on system call `fsyncdata` to > sync data to disk. If yes, then I don't think it's safe to use NFS. Well, that's a whole other discussion. The point about mount directories applies to any sort of dismountable storage. (But I too would not use Postgres-over-NFS for any critical data. Too many moving parts. It's tough enough to ensure crash safety with local storage.) regards, tom lane