Bogus error message about private key (not a bug). - Mailing list pgsql-bugs

From Stefanos Harhalakis
Subject Bogus error message about private key (not a bug).
Date
Msg-id 200411131347.32374.v13@priest.com
Whole thread Raw
Responses Re: Bogus error message about private key (not a bug).
List pgsql-bugs
Hi there,

PostgreSQL 7.4.6 gives the following error message when trying to read the=
=20
private key in the case of:

-rw-------  1 root root 887 Aug 19 15:01 /var/lib/postgres/data/server.key

2004-11-13 13:04:42 [4095] FATAL:  unsafe permissions on private key file=
=20
"/var/lib/postgres/data/server.key"
DETAIL:  File must be owned by the database user and must have no permissio=
ns=20
for "group" or "other".

I believe that the checks in src/backend/libpq/be-secure.c:653 should be=20
performed in a different order (first the access permissions and then the=
=20
owner of the key) just to give a more appropriate message.

Thanks in advance,

<<V13>>

pgsql-bugs by date:

Previous
From: David Walker
Date:
Subject: libplperl.so and libperl.so
Next
From: Tom Lane
Date:
Subject: Re: Bogus error message about private key (not a bug).