Skip to content

Commit 162dc31

Browse files
committed
Update spoofing /tmp symlink instructions to be more specific about the
name of the needed symlink file.
1 parent 06462f5 commit 162dc31

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

doc/src/sgml/runtime.sgml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.404 2008/01/31 17:22:43 momjian Exp $ -->
1+
<!-- $PostgreSQL: pgsql/doc/src/sgml/runtime.sgml,v 1.405 2008/01/31 23:03:16 momjian Exp $ -->
22

33
<chapter Id="runtime">
44
<title>Operating System Environment</title>
@@ -1398,10 +1398,10 @@ $ <userinput>kill -INT `head -1 /usr/local/pgsql/data/postmaster.pid`</userinput
13981398
linkend="guc-unix-socket-directory">) that has write permission only
13991399
for a trusted local user. This prevents a malicious user from creating
14001400
their own socket file in that directory. If you are concerned that
1401-
some applications might still look in <filename>/tmp</> for the
1402-
socket file and hence be vulnerable to spoofing, create a symbolic link
1403-
during operating system startup in <filename>/tmp</> that points to
1404-
the relocated socket file. You also might need to modify your
1401+
some applications might still reference <filename>/tmp</> for the
1402+
socket file and hence be vulnerable to spoofing, during operating system
1403+
startup create symbolic link <filename>/tmp/.s.PGSQL.5432</> that points
1404+
to the relocated socket file. You also might need to modify your
14051405
<filename>/tmp</> cleanup script to preserve the symbolic link.
14061406
</para>
14071407

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy