Tom Lane wrote:

"Marc G. Fournier" <[EMAIL PROTECTED]> writes:
Then again, in the case of pg_upgrade, wouldn't just disabling access from
anywhere except localhost prevent others from getting in?

Not if your normal operating mode includes connections from clients running locally. I really don't see any clean way to ensure that pg_upgrade (and subsidiary pg_dump runs invoked by it) are the only ones allowed to connect to the database, if we keep the normal postmaster running. But if we shut down the postmaster then it's trivial.

If you want to prevent "accidential" access, start postmaster on a non-standard port.



Jan


--
#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me.                                  #
#================================================== [EMAIL PROTECTED] #


---------------------------(end of broadcast)--------------------------- TIP 6: Have you searched our list archives?

http://archives.postgresql.org

Reply via email to