pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Chris Bitmead <chris@bitmead.com>
To: PostgreSQL HACKERS <pgsql-hackers@postgresql.org>
Subject: Re: fcntl(SETLK) [was Re: 2nd update on TOAST]
Date: Sun, 09 Jul 2000 01:08:27 +1000
Message-ID: <396743EB.62592694@bitmead.com> (raw)
References: <Pine.LNX.4.21.0007081516550.348-100000@localhost.localdomain>


> There's a possible DoS attack when someone else comes first and creates a
> file /tmp/.s.PGSQL.5432. But detecting whether there's another program
> running on that socket (if it's a socket) isn't going to help because you
> most likely won't be able to delete it anyway. The solution to this is to
> make the path of the socket file configurable more easily so that the
> administrator has the choice of putting it a safer place that he prepared
> appropriately.

If you are worried about DoS, I think the only solution is to figure out
a way to be using one of the reserved <1000 ports. I don't think there's
any way around that is there? Also presumably not using a reserved port
is a security risk. Not that I'm worried.



view thread (18+ messages)  latest in thread

Message-ID: <396743EB.62592694@bitmead.com>
Permalink:  ../396743EB.62592694@bitmead.com/
Also on:    postgresql.org/message-id/396743EB.62592694@bitmead.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: chris@bitmead.com
  Subject: Re: fcntl(SETLK) [was Re: 2nd update on TOAST]
  In-Reply-To: <396743EB.62592694@bitmead.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox