Re: database file encryption

Martha Stewart called it a Good Thing when kleptog(at)svana(dot)org (Martijn van Oosterhout) wrote:
> On Fri, Aug 11, 2006 at 09:47:49AM +0200, Stefano B. wrote:
>> Hi all,
>>
>> I have just discovered that in postgres database file the data are
>> not encrypted. If I open with a text editor these files I can read
>> the records values.
>>
>> I'd like to know if there is a way in order to encrypt these data.
>
> Sure, run postgres over an encrypted filesystem.

Actually, that may not work the way you think it does...

As long as the encrypted filesystem is mounted, you can access the
unencrypted data

>> PS. for example in mysql the database file are not readable.
>
> Odd, I just opened a random mysql file here in a text editor and I
> could read the strings just fine.

The method that consistently works is to encrypt the data before
putting it in the database so that the DBMS is unaware of what the
plaintext form is...
--
output = reverse("moc.liamg" "@" "enworbbc")
http://linuxdatabases.info/info/slony.html
"Linux: the operating system with a CLUE... Command Line User
Environment". (seen in a posting in comp.software.testing)