From: Tom Lane <tgl@sss.pgh.pa.us>
To: Sergio A. Kessler <ser@perio.unlp.edu.ar>
Cc: Lamar Owen <lamar.owen@wgcr.org>
Cc: pgsql-interfaces@postgreSQL.org <pgsql-interfaces@postgreSQL.org>
Subject: Re: [INTERFACES] pg_pwd
Date: Fri, 19 Nov 1999 17:43:22 -0500
Message-ID: <3766.943051402@sss.pgh.pa.us> (raw)
In-Reply-To: <3835CA7B.5D7FF6F3@perio.unlp.edu.ar>
"Sergio A. Kessler" <ser@perio.unlp.edu.ar> writes:
>> See doc/TODO.detail/pg_shadow.
> where ? can you post an absolute url ?
Sorry, I forgot that the TODO.detail files are not in the 6.5.*
distribution (they got added to the CVS repository since 6.5).
I'm not sure if they are available separately at the website (Bruce?).
I know you could get them by downloading a current snapshot...
>>>> and why is world =writable & readable= ?
>>>> (hey, everybody, wanna know my passwd ?)
>>
>> It's not really a security hole because it lives inside a directory
>> that's mode 700 (unless you tampered with the default permissions
>> setup).
> in rh6.1 /var/lib/pgsql is 755 (and no, I haven't changed anything)
> can you spell "2_KM_DIAMETER_HOLE" ?
In a standard setup, pg_pwd is inside .../pgsql/data which is mode 700.
Have the RH guys really blown it this badly? (Lamar?)
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: tgl@sss.pgh.pa.us, ser@perio.unlp.edu.ar, lamar.owen@wgcr.org
Subject: Re: [INTERFACES] pg_pwd
In-Reply-To: <3766.943051402@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox