nci/gsky

mas data ingestion operations require root

Closed this issue · 1 comments

Currently the shard_x.sh scripts have "runuser postgres" statements in them. runuser requires setuid privilege which often means root. This is undesirable if the scripts are run by data collection/management teams as they're not going to have root like sysadmin does.

bje- commented

I think we should remove the runuser altogether and leave it to the user to externally control the uid the script runs under, if it is needed at all. eg. sudo shard_ingest.sh.