Re: Securing PostgreSQL for rootless containers

2025-02-25 Thread Yogesh Sharma
On 2/24/25 14:51, Yogesh Sharma wrote: This patch has effect on current use of socket unless systemd socket are used. Code is also guarded when postgres is not compiled with systemd flag. I meant to say This patch has **no** effect on current use of socket unless systemd socket are used.

Securing PostgreSQL for rootless containers

2025-02-24 Thread Yogesh Sharma
Hello Hackers, When running PostgreSQL in container as rootless and bridged network, all connection will appear as local connection not matter what their origin is and pg_hba.conf based allow/deny will not be effective. One approach is to make PostgreSQL aware of systemd socket activation, w