Re: Spoofing as the postmaster

["D'Arcy J.M. Cain" <darcy(at)druid(dot)net>]

On Sat, 22 Dec 2007 09:25:05 -0500 (EST)
Bruce Momjian <bruce(at)momjian(dot)us> wrote:
> I think at a minimum we need to add documentation that states if you
> don't trust the local users on the postmaster server you should:
> 
> 	o  create unix domain socket files in a non-world-writable
> 	   directory
> 	o  require SSL server certificates for TCP connections
> 
> Ideas?  

It's generally a bad idea to put your database on a public server
anyway but if you do you should definitely disable unix domain sockets
and connect over TCP to localhost.  That has been our rule for years.

It's certainly a corner case.  I would think that warnings, perhaps in
the config file itself, would be sufficient.

-- 
D'Arcy J.M. Cain <darcy(at)druid(dot)net>         |  Democracy is three wolves
http://www.druid.net/darcy/                |  and a sheep voting on
+1 416 425 1212     (DoD#0082)    (eNTP)   |  what's for dinner.