diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2004-10-22 00:24:27 +0000 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2004-10-22 00:24:27 +0000 |
| commit | 5b7e88dbe0ad700e2994989c7b01f08f9e6b31d4 (patch) | |
| tree | 20ae9130b73082eb85b2a5803361f1364eece770 /src/backend/utils/adt/regexp.c | |
| parent | 25d1755a29ec77facafff42920403df13f218c96 (diff) | |
| download | postgresql-5b7e88dbe0ad700e2994989c7b01f08f9e6b31d4.tar.gz postgresql-5b7e88dbe0ad700e2994989c7b01f08f9e6b31d4.zip | |
Prevent pg_ctl from being run as root. Since it uses configuration files
owned by postgres, doing "pg_ctl start" as root could allow a privilege
escalation attack, as pointed out by iDEFENSE. Of course the postmaster would
fail, but we ought to fail a little sooner to protect sysadmins unfamiliar
with Postgres. The chosen fix is to disable root use of pg_ctl in all cases,
just to be confident there are no other holes.
Diffstat (limited to 'src/backend/utils/adt/regexp.c')
0 files changed, 0 insertions, 0 deletions