Craig James craig_james at emolecules.com
Tue Feb 19 17:05:43 PST 2008
Geoffrey wrote:
> I"m curious as to how folks start the slony processes.  I've been using 
> root since the processes need to write to the /usr/log directory.  Do 
> folks do this a different way?  I would prefer it to be the postgres 
> user, but that doesn't seem to be possible.

It's never a good idea to run any daemon as root unless there's a genuine reason.  Slony is great, but do you trust your entire system to it?  Running Slon as "postgres" is also a bad idea, since that user has access to ALL postgres data.

I don't think there are any known hacks/exploits for Slony, but if one turned up, it would give a hacker free access.

I run the slon daemon under my own userid, and I have a separate slon logfile.

Craig


More information about the Slony1-general mailing list