Bruce Momjian <[EMAIL PROTECTED]> writes:
> I understand, but how do we get suid execution. Does someone have to
> set the seuid bit on the executable?
Probably so, but I could see someone thinking they could do that as a
substitute for saying "su - postgres" on every startup.
If we are going to take the trouble to refuse to run when euid = 0,
then it also behooves us to guard against ruid = 0.
regards, tom lane
---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
(send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])
- [HACKERS] setuid(geteuid());? Peter Eisentraut
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Tom Lane
- Re: [HACKERS] setuid(geteuid());? Tom Lane
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Tom Lane
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Peter Eisentraut
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Tom Lane
- Re: [HACKERS] setuid(geteuid());? Tom Lane
- Re: [HACKERS] setuid(geteuid())... Peter Eisentraut
- Re: [HACKERS] setuid(geteuid())... Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Bruce Momjian
- Re: [HACKERS] setuid(geteuid());? Peter Eisentraut
