]> granicus.if.org Git - postgresql/commit
projects / postgresql / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9eff02f) | patch
Prevent pg_ctl from being run as root. Since it uses configuration files
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 22 Oct 2004 00:24:18 +0000 (00:24 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 22 Oct 2004 00:24:18 +0000 (00:24 +0000)
commitc58675b42886f7aa1d8871d4917d512c477ca402
tree6c74154fb1f524d6af23b70666b0797f4295e1e1tree | snapshot
parent9eff02f5ac374466e37d63ed4361496a4aeef0d6commit | diff
Prevent pg_ctl from being run as root.  Since it uses configuration files
owned by postgres, doing "pg_ctl start" as root could allow a privilege
escalation attack, as pointed out by iDEFENSE.  Of course the postmaster would
fail, but we ought to fail a little sooner to protect sysadmins unfamiliar
with Postgres.  The chosen fix is to disable root use of pg_ctl in all cases,
just to be confident there are no other holes.
src/bin/pg_ctl/pg_ctl.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.