Обсуждение: About the requirements of security for W32.

Поиск
Список
Период
Сортировка

About the requirements of security for W32.

От
Alexander Panzhin
Дата:
I understand that security is very important, but does it really matter

when 1 person wants to test his own app on his own PC(witch is not
connected to any Network).
I can not test any of my app with PostgreSQL because it will not install
on my WinXP(No NTFS).
It requests: NTFS, separate user and so on. Why?
I have only 1 PC, I do not want to switch from FAT32(I would loose all
my valuable data, and for compatibility with Linux) and in consequence I
cant test out PostgreSQL.
You would say to hell with Win use Linux ,but there is a problem of
testing Win apps on Linux.
It would be great if there would be a command line switch that would
overwrite some requiremnets(atleast for Win32 MSI Installer).



Re: About the requirements of security for

От
Andrew Dunstan
Дата:

Alexander Panzhin wrote:

> I understand that security is very important, but does it really matter


Yes (and if it didn't saying you understand how important it is would be
simply silly).

>
> when 1 person wants to test his own app on his own PC(witch is not
> connected to any Network).
> I can not test any of my app with PostgreSQL because it will not
> install on my WinXP(No NTFS).
> It requests: NTFS, separate user and so on. Why?


Ok, apparently you *don't* understand how important security is. How are
we to know at install time that you will not later connect your computer
to a network?

> I have only 1 PC, I do not want to switch from FAT32(I would loose all
> my valuable data, and for compatibility with Linux) and in consequence
> I cant test out PostgreSQL.
> You would say to hell with Win use Linux ,but there is a problem of
> testing Win apps on Linux.
> It would be great if there would be a command line switch that would
> overwrite some requiremnets(atleast for Win32 MSI Installer).
>
>

You mean you want a button that says "ignore sane security requirements
for user convenience"?

If you want a platform for testing an app, I suggest you use the Cygwin
version.

cheers

andrew

Re: About the requirements of security for W32.

От
"Merlin Moncure"
Дата:
> I understand that security is very important, but does it really
matter
>
> when 1 person wants to test his own app on his own PC(witch is not
> connected to any Network).
> I can not test any of my app with PostgreSQL because it will not
install
> on my WinXP(No NTFS).
> It requests: NTFS, separate user and so on. Why?
> I have only 1 PC, I do not want to switch from FAT32(I would loose all
> my valuable data, and for compatibility with Linux) and in consequence
I
> cant test out PostgreSQL.
> You would say to hell with Win use Linux ,but there is a problem of
> testing Win apps on Linux.
> It would be great if there would be a command line switch that would
> overwrite some requiremnets(atleast for Win32 MSI Installer).

This has been discussed ad nauseum on the list but I'll summarize the
major points here:
1. You can run PostgreSQL on FAT32, but the installer will not allow it.
Fat32 is not journaling and should not host a database server.
2. The database runs as a user process so that if it is compromised your
machine will not be rooted (future versions of SQL server will do the
same).
3. PostgreSQL is open source.  You can always disable the admin user
check and recompile (this is in fact a trivial edit).  You need to
understand this if you are going to be developing applications for
PostgreSQL.
4. And most importantly, the MSI installer is *not* maintained as part
of the source distribution (all though the people involved are basically
all hackers).  Go to pgfoundry to make requests and/or complaints about
it.

I promise that if you take the time to learn postgres and it's
internals, you will come to see the wisdom of these decisions, as I
have.

Merlin

Re: About the requirements of security for

От
Andreas Pflug
Дата:
Alexander Panzhin wrote:

> I have only 1 PC, I do not want to switch from FAT32(I would loose all
> my valuable data,

No. CONVERT preserves data.

  and for compatibility with Linux

Several ntfs file systems are available, including captive-ntfs which
reuses original win32 modules for writing.

Regards,
Andreas