Skip site navigation (1) Skip section navigation (2)

Re: Can we hide data from the superadmin

From: Alvaro Herrera <alvherre(at)commandprompt(dot)com>
To: Tarun Sharma <tarun(dot)sharma(at)newgen(dot)co(dot)in>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: Can we hide data from the superadmin
Date: 2009-12-30 14:57:44
Message-ID: 20091230145743.GD3662@alvh.no-ip.org (view raw or flat)
Thread:
Lists: pgsql-hackers
Tarun Sharma wrote:
> hi,
> 
> i assigned super user privelledge to a user by specifing entries in pg_hba.conf file as 
> 
> host    all    newuser    127.1.1.1 md5
> 
> and the default postgres user is made access to only the default postgres databse and is no more the super user.
> 
> the problem is that this conf file is available to all and can be changed again.

It is only available to all if all is somebody who has superuser access
to the operating system, which is something you should avoid.

If you don't trust your OS superuser, there's nothing you can do.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.

In response to

pgsql-hackers by date

Next:From: Teodor SigaevDate: 2009-12-30 14:59:53
Subject: Re: KNNGiST for knn-search (WIP)
Previous:From: Alvaro HerreraDate: 2009-12-30 14:56:29
Subject: Re: test/example does not support win32.

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group