SEO

Hi,

If I may ask, is there any plan for embedded PostgreSQL database as we have it in Firebird database? In Firebird embedded a compact engine of the database that can only accept connections from localhost (127.0.0.1) and easily distributable with single user applications exists.

Any plan for such?


---------------------------------
ALL-NEW Yahoo! Messenger - all new features - even more fun!

Tope Akinniyi wrote:
> If I may ask, is there any plan for embedded PostgreSQL database

No.

--
Peter Eisentraut
http://developer.postgresql.org/~petere/

---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

Martha Stewart called it a Good Thing when topeakinniyi@yahoo.co.uk (Tope Akinniyi) wrote:
> If I may ask, is there any plan for embedded PostgreSQL database as
> we have it in Firebird database?**In Firebird embedded a compact
> engine of the database that can only accept connections from
> localhost (127.0.0.1) and easily distributable with single user
> applications exists.

You can do that with PostgreSQL by configuring pg_hba.conf to only
accept connections from localhost.

And there is no problem with the notion of creating a database in a
local directory.

None of this requires any change.
--
output = reverse("moc.liamg" "@" "enworbbc")
http://www3.sympatico.ca/cbbrowne/postgresql.html
Signs of a Klingon Programmer #11: "This machine is a piece of GAGH! I
need dual Pentium processors if I am to do battle with this code!"

On Jan 25, 2005, at 8:44 AM, Christopher Browne wrote:
> You can do that with PostgreSQL by configuring pg_hba.conf to only
> accept connections from localhost.
>
> And there is no problem with the notion of creating a database in a
> local directory.
>
> None of this requires any change.


But on Windows 8.0 you can't run the postmaster with an administrative
account, correct? I really wish this was configurable in the PostgreSQL
settings (of course, defaulting to the way it is now).


John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL


---------------------------(end of broadcast)---------------------------
TIP 9: the planner will ignore your desire to choose an index scan if your
joining column's datatypes do not match

desoi@pgedit.com (John DeSoi) writes:
> On Jan 25, 2005, at 8:44 AM, Christopher Browne wrote:
>> You can do that with PostgreSQL by configuring pg_hba.conf to only
>> accept connections from localhost.
>>
>> And there is no problem with the notion of creating a database in a
>> local directory.
>>
>> None of this requires any change.
>
> But on Windows 8.0 you can't run the postmaster with an
> administrative account, correct? I really wish this was configurable
> in the PostgreSQL settings (of course, defaulting to the way it is
> now).

I haven't the foggiest idea what you can do on Windows 8.0; I thought
they called it Windows XP or Windows 2000.

I'm making the Unix-flavoured assumptions that it's cheap and easy to
create an extra directory and to spawn an extra process for a
postmaster in a user's own process space.

That may vary somewhat for the more VMS-like model of Windows NT...
--
"cbbrowne","@","ca.afilias.info"
<http://dev6.int.libertyrms.com/>
Christopher Browne
(416) 673-4124 (land)

On Jan 25, 2005, at 1:55 PM, Christopher Browne wrote:

> I haven't the foggiest idea what you can do on Windows 8.0; I thought
> they called it Windows XP or Windows 2000.

Sorry, I meant version 8.0 of PostgreSQL on Windows (any variant it
works on).

>
> I'm making the Unix-flavoured assumptions that it's cheap and easy to
> create an extra directory and to spawn an extra process for a
> postmaster in a user's own process space.
>
> That may vary somewhat for the more VMS-like model of Windows NT...


In general, it should be possible to just copy the right files and do
the same thing on Windows but the pgInstaller FAQ says

==
2.3) Why do I need a non-administrator account to run PostgreSQL under?

When a hacker gains entry to a computer using a software bug in a
package, she gains the permissions of the user account under which the
service is run. Whilst we do not know of any such bugs in PostgreSQL,
we enforce the use of a non-administrative service account to minimise
the possible damage that a hacker could do should they find and utilise
a bug in PostgreSQL to hack the system.

This has long been common practice in the Unix world, and is starting
to become standard practice in the Windows world as well as Microsoft
and other vendors work to improve the security of their systems.
==

Again, I think this is fine as the default, but it would be nice if it
could be changed with a setting (rather than recompiling the source).
Not all Windows users are dummies about security and need PostgreSQL to
enforce security measures beyond those implemented on other platforms.


John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL


---------------------------(end of broadcast)---------------------------
TIP 4: Don't 'kill -9' the postmaster

John DeSoi <desoi@pgedit.com> writes:
>> 2.3) Why do I need a non-administrator account to run PostgreSQL under?

> Again, I think this is fine as the default, but it would be nice if it
> could be changed with a setting (rather than recompiling the source).
> Not all Windows users are dummies about security and need PostgreSQL to
> enforce security measures beyond those implemented on other platforms.

Sorry, but any Windows user who thinks he doesn't need security measures
equivalent to (not "beyond") minimum Unix practice is a dummy about
security. Take a look at this LOAD vulnerability we're in the midst of
patching, and ask yourself whether you aren't glad that it can't be used
to get admin privileges on your Windows box.

(John Heasman pointed out to me off-list that the LOAD hole *is* remotely
exploitable on Windows; details left as an exercise for the reader.)

regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 1: subscribe and unsubscribe commands go to majordomo@postgresql.org

Hi Tom,

On Jan 25, 2005, at 4:35 PM, Tom Lane wrote:

> Sorry, but any Windows user who thinks he doesn't need security
> measures
> equivalent to (not "beyond") minimum Unix practice is a dummy about
> security. Take a look at this LOAD vulnerability we're in the midst of
> patching, and ask yourself whether you aren't glad that it can't be
> used
> to get admin privileges on your Windows box.

So a vulnerability exists on Windows even if PostgreSQL is only
accepting local connections?

The poster asked about embedded databases and that is what I'm trying
to address. I realize this has been thoroughly hashed about in the
archives, but I don't recall any discussion of PotgreSQL 8 on Windows.

Thanks,


John DeSoi, Ph.D.
http://pgedit.com/
Power Tools for PostgreSQL


---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?

http://archives.postgresql.org

John DeSoi wrote:
> But on Windows 8.0 you can't run the postmaster with an administrative
> account, correct? I really wish this was configurable in the PostgreSQL
> settings (of course, defaulting to the way it is now).

I think there have been several threads debating this issue in the past
(on whether Postgres should allow running as root if the user wants to).
And in Windows case it can also be argued that Windows XP is a "single
user" OS.

But then again running as root/Administrator is a _really bad_ idea, so
bad that I'm glad there are software like Apache or Postgres which
proactively discourage this practice by flat-out refusing to run as
root/Administrator.

In Windows, if the installing user is an administrator, I don't think
it's that hard to add several lines of code in your app's installer to
create a normal user for Postgres to run as.

--
dave

---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend