Currently on our RHEL 7.8 system, /etc/pgbackrest.conf is root:root and 633 perms.  Normally, that's ok, but is a horrible idea when it's a plaintext file, and stores the pgbackrest encryption password.

Would pgbackrest (or something else) break if I change it to postgres:postgres 600 perms?

Is there a better way of hiding the password so that only user postgres can see it?

--
Angular momentum makes the world go 'round.


Reply via email to