Security question : Database access control

From: "Igor Georgiev" <gory(at)alphasoft-bg(dot)com>
To: <pgsql-admin(at)postgresql(dot)org>
Cc: <pgsql-hackers(at)postgresql(dot)org>
Subject: Security question : Database access control
Date: 2002-10-22 15:05:38
Message-ID: 001f01c279dc$7c7e1940$0b0546c0@alpha.bg
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-hackers

Is there any way to prevent superuser to acces the database ?
I mean something like "GRANT / REVOKE CONNECT" MECHANISM

I have no idea how to prevent root from access data in one of this ways :
root @ linux:~#su - postgres
postgres @ linux:/usr/local/pgsql/bin$pg_dump ....
or
edit pg_hba.conf
# Allow any user on the local system to connect to any
# database under any username, but only via an IP connection:
host all 127.0.0.1 255.255.255.255 trust
# The same, over Unix-socket connections:
local all trust
or my nightmare a cygwin on Win 98 everybody can can access everything :-((((

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Andrew Sullivan 2002-10-22 15:11:43 Re: Using oid with RServ w/ Postgresql 7.2
Previous Message Andrew Sullivan 2002-10-22 15:04:45 Re: Upgrade to new version

Browse pgsql-hackers by date

  From Date Subject
Next Message scott.marlowe 2002-10-22 15:13:43 Re: [HACKERS] Security question : Database access control
Previous Message Andrew Sullivan 2002-10-22 14:51:48 Re: Disabling triggers (was Re: pgsql 7.2.3 crash)