Re: trust authentication behavior

From: Denis Kirjanov <kda(at)itsirius(dot)su>
To: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
Cc: pgsql-hackers(at)postgresql(dot)org
Subject: Re: trust authentication behavior
Date: 2015-05-14 19:22:44
Message-ID: 366225865.336506.1431631364778.JavaMail.zimbra@itsirius.su
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Yeah, but the idea is to do that without the pg_hba.conf

----- Ursprüngliche Mail -----
Von: "David G. Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
An: "Denis Kirjanov" <kda(at)itsirius(dot)su>
CC: pgsql-hackers(at)postgresql(dot)org
Gesendet: Donnerstag, 14. Mai 2015 18:22:45
Betreff: Re: [HACKERS] trust authentication behavior

On Thu, May 14, 2015 at 2:16 AM, Denis Kirjanov <kda(at)itsirius(dot)su> wrote:

> Hello guys,
>
> Is it possible to restrict the trust auth method to accept local
> connections only using the selinux policy?
>

You want selinux to prevent trust connections from non-local clients even
if pg_hba.conf explicitly allows them?

David J

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Stephen Frost 2015-05-14 19:30:28 Re: pgsql: Add pg_audit, an auditing extension
Previous Message Stephen Frost 2015-05-14 19:21:35 Re: pgsql: Add pg_audit, an auditing extension