From: Stephen Frost <sfrost@snowman.net>
To: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-hackers@postgreSQL.org
Subject: Re: Back-patch use of unnamed POSIX semaphores for Linux?
Date: Wed, 7 Dec 2016 09:33:57 -0500
Message-ID: <20161207143357.GX23417@tamriel.snowman.net> (raw)
In-Reply-To: <722c489e-810a-be9c-f005-3b6bdcb4c59f@2ndquadrant.com>
References: <32387.1481079186@sss.pgh.pa.us>
<722c489e-810a-be9c-f005-3b6bdcb4c59f@2ndquadrant.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-hackers>
All,
* Peter Eisentraut (peter.eisentraut@2ndquadrant.com) wrote:
> On 12/6/16 9:53 PM, Tom Lane wrote:
> > I think we should give serious consideration to back-patching commit
> > ecb0d20a9, which changed the default semaphore type to unnamed-POSIX
> > on Linux.
>
> Even with that change, dynamic shared memory is still vulnerable to be
> removed. So backpatching the semaphore change wouldn't achieve any new
> level of safety for users so that we could tell them, "you're good now".
I tend to agree with Peter, Magnus, and Craig on this. If you aren't
running PG as a system user on a system where systemd feels happy to
kill processes and remove shared memory segments and semaphores when you
log out, no amount of back-patching of anything is going to make you
'safe'. As noted in the thread referenced, users who are trying to
(mistakenly) do this are already having to modify their logind.conf file
to not have PG outright killed when they log out, it's on them to make
sure systemd doesn't do other stupid things when they log out too if
they really want PG to be run as their user account.
Thanks!
Stephen
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net, peter.eisentraut@2ndquadrant.com, tgl@sss.pgh.pa.us
Subject: Re: Back-patch use of unnamed POSIX semaphores for Linux?
In-Reply-To: <20161207143357.GX23417@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox