On 06.11.24 22:58, PG Doc comments form wrote:
The 'short' script can then be rewritten as

```
# work done as a regular user
./configure
make build

# work that requires ROOT access
su
mkdir /usr/local/pgsql/data
chown (current user):(current group) /usr/local/pgsql
adduser --system --group postgres
exit

# work that requires POSTGRES access
su -u postgres
make install installdirs
exit

We don't want the installed files to be owned by postgres. That would mean that a compromised PostgreSQL server (running as "postgres") could overwrite its own installation files. You don't have to use "root" for the installation, of course, but it should be separate from "postgres".



Reply via email to