From debbugs-submit-bounces@debbugs.gnu.org Tue Jun 25 11:40:53 2019 Received: (at 36191) by debbugs.gnu.org; 25 Jun 2019 15:40:53 +0000 Received: from localhost ([127.0.0.1]:33286 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnYy-0006qJ-Qs for submit@debbugs.gnu.org; Tue, 25 Jun 2019 11:40:53 -0400 Received: from eggs.gnu.org ([209.51.188.92]:57605) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1hfnYx-0006q7-Ck for 36191@debbugs.gnu.org; Tue, 25 Jun 2019 11:40:51 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:60214) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hfnYr-0002XT-4t; Tue, 25 Jun 2019 11:40:45 -0400 Received: from [2001:660:6102:320:e120:2c8f:8909:cdfe] (port=53734 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1hfnYq-0002Mz-HQ; Tue, 25 Jun 2019 11:40:44 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Robert Vollmert Subject: Re: [bug#36191] [PATCH] gnu: postgres service: More secure default permissions. References: <20190613135037.10645-1-rob@vllmrt.net> Date: Tue, 25 Jun 2019 17:40:43 +0200 In-Reply-To: <20190613135037.10645-1-rob@vllmrt.net> (Robert Vollmert's message of "Thu, 13 Jun 2019 15:50:37 +0200") Message-ID: <874l4dlll0.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 36191 Cc: 36191@debbugs.gnu.org, Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hello, Robert Vollmert skribis: > This changes to 'peer' authentication for local socket connections, > and password-based authentication for local network connections. > > * gnu/services/databases.scm (%default-postgres-hba): Change > authentication method. That sounds reasonable to me. Chris, WDYT? Thanks, Ludo=E2=80=99.