Ensure PostgreSQL subdirectory locations are outside the data cluster

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run SELECT name, setting FROM pg_settings WHERE name ~ '_directory$' OR name ~ '_tablespace'; and inspect the returned paths: log/stats/temp/tablespace locations should be outside the data cluster and only superusers and authorized users may access them.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Relocate log_directory, tablespaces and other subdirectories outside PGDATA, owned by postgres with mode 0700, and update postgresql.conf accordingly.