Public bug reported:

The prometheus-pgbouncer-exporter only opens a socket to an existing
pgbouncer daemon if pgbouncer is installed and running.  Exporter does
not use a psql client or talk directly to PostgresSQL services.  This
package does not need to depend on postgresql-common at all, and doing
so leaves the client with a full, unexpected, and unmanaged installation
of postgreslq-server running on it.

If this is being done to re-use the postgres service account, this is a
security issue as the unexpected sql server never gets configured off
the package defaults.

This package should either reuse the generic service account, or just
create one for itself.

** Affects: prometheus-pgbouncer-exporter (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1972710

Title:
  Package unnecessarily depend son postgresql-common

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/prometheus-pgbouncer-exporter/+bug/1972710/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to