>Do you have sudo? If so then what does "sudo -u postgres id" show? >If uid and euid are the same (both postgres) then you might be able >to start the postmaster with sudo instead of su. "sudo -u postgres id" show uid=0(root) gid=26 euid=26(postgres) groups=26 >What do you mean by "the hacker"? Do you know or suspect that >you've been hacked? If so then I'd recommend that you reinstall >your system from trustworthy media, make sure you have current >security patches, and close any configuration holes that might have >let an intruder in. Yes, I have been hacked, because I found a new unknown a/c in my system. and in log file get this message: Sep 3 22:55:00 TWeb su(pam_unix)[24299]: session opened for user root by (uid=0) Sep 3 22:55:17 TWeb su(pam_unix)[24299]: session closed for user root David