Geoffrey lists at serioustechnology.com
Tue Feb 19 17:27:58 PST 2008
Craig James wrote:
> Geoffrey wrote:
>> I"m curious as to how folks start the slony processes.  I've been 
>> using root since the processes need to write to the /usr/log 
>> directory.  Do folks do this a different way?  I would prefer it to be 
>> the postgres user, but that doesn't seem to be possible.
> 
> It's never a good idea to run any daemon as root unless there's a 
> genuine reason.  Slony is great, but do you trust your entire system to 
> it?  Running Slon as "postgres" is also a bad idea, since that user has 
> access to ALL postgres data.

Agreed, regarding root, although, any other user id I would run it as 
would have access to the data as well.

I'll likely hack the scripts so that I can write the logs to where they 
want them and run the daemons as postgres.

-- 
Until later, Geoffrey

Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety.
  - Benjamin Franklin


More information about the Slony1-general mailing list