Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-16 Thread Amol Inamdar
ot possible, as that would take this discussion to another context, hence avoiding. Thanks in advance On Wed, Jul 16, 2025 at 9:18 PM Laurenz Albe wrote: > On Wed, 2025-07-16 at 18:54 +0530, Amol Inamdar wrote: > > I would like to rephrase the question a little bit, below is how our >

Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-16 Thread Amol Inamdar
the Posgres user can read/write to this directory) Considering the above scenario/setup, what is the danger of removing the ownership check in miscinit.c checkDataDir() function ? On Tue, Jul 15, 2025 at 5:06 PM Amol Inamdar wrote: > Thanks Tom and Laurenz for the explanation. > Let me try

Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-15 Thread Amol Inamdar
Thanks Tom and Laurenz for the explanation. Let me try out a few things and get back to you if needed. Thanks, Amol On Mon, Jul 14, 2025 at 7:37 PM Tom Lane wrote: > Laurenz Albe writes: > > It is not a good idea to have a mount point be the data directory. > > ^^^ This. ^^^ > > That is primar

Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-15 Thread Amol Inamdar
Thanks Laurenz. On Mon, Jul 14, 2025 at 8:11 PM Laurenz Albe wrote: > On Mon, 2025-07-14 at 18:32 +0530, Amol Inamdar wrote: > > > The data directory can either be created by "initdb", in which case > > > the mount point must allow the PostgreSQL user to create a

Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-14 Thread Amol Inamdar
Mon, 2025-07-14 at 17:59 +0530, Amol Inamdar wrote: > > If I am not mistaken, below is my understanding of your suggestion. > > > > Suppose that My mount point on the NFS server is say > /nfs-mount/postgres/ > > and you are suggesting to have a data directory as say &g

Re: Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-14 Thread Amol Inamdar
value to the PGDATA ? If that is the case, then when and who should be creating the directory DB ? Please correct me if I am wrong about the understanding. Thanks, Amol On Mon, Jul 14, 2025 at 5:50 PM Laurenz Albe wrote: > On Mon, 2025-07-14 at 11:19 +0530, Amol Inamdar wrote: >

Bypassing Directory Ownership Check in PostgreSQL 16.6 with Secure z/OS NFS (AT-TLS)

2025-07-14 Thread Amol Inamdar
Dear PostgreSQL Community, I'm currently running PostgreSQL version 16.6 inside a Docker container (base image: UBI 9), using Docker Compose. The PostgreSQL data directory is mounted from an NFS volume hosted on a z/OS NFS server. The environment has a few constraints: - The NFS server runs on z