Hi Russel!

Russell Coker [2005-11-13 23:23 +1100]:
> When started from an administrator terminal the postgresql daemon inherits the
> administrator's terminal as the controlling tty.  This means that the daemon 
> if
> compromised could be used to attack the administrator by injecting terminal
> input.

Thanks for your report. I see that keeping tty descriptors open is a
problem. However, how can I check this? I started a cluster from the
command line ('pg_ctlcluster 8.1 main start') and used 'lsof' to get
the open fds, which only yields:

  postmaste 7567 postgres    0r   CHR        1,3             601 /dev/null

No tty or pty whatsoever. How did you manage to leave a tty open? Or
is lsof not an appropriate way to check for open ttys? (It works fine
for other programs, like bash).

Thanks,

Martin
-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to