| From: | Alvaro Herrera <alvherre(at)commandprompt(dot)com> |
|---|---|
| To: | Tarun Sharma <tarun(dot)sharma(at)newgen(dot)co(dot)in> |
| Cc: | pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: Can we hide data from the superadmin |
| Date: | 2009-12-30 14:57:44 |
| Message-ID: | 20091230145743.GD3662@alvh.no-ip.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
Tarun Sharma wrote:
> hi,
>
> i assigned super user privelledge to a user by specifing entries in pg_hba.conf file as
>
> host all newuser 127.1.1.1 md5
>
> and the default postgres user is made access to only the default postgres databse and is no more the super user.
>
> the problem is that this conf file is available to all and can be changed again.
It is only available to all if all is somebody who has superuser access
to the operating system, which is something you should avoid.
If you don't trust your OS superuser, there's nothing you can do.
--
Alvaro Herrera http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Teodor Sigaev | 2009-12-30 14:59:53 | Re: KNNGiST for knn-search (WIP) |
| Previous Message | Alvaro Herrera | 2009-12-30 14:56:29 | Re: test/example does not support win32. |