Re: How to revoke privileged from PostgreSQL's superuser

From: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
To: Evan Rempel <erempel(at)uvic(dot)ca>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, "pgsql-admin(at)lists(dot)postgresql(dot)org" <pgsql-admin(at)lists(dot)postgresql(dot)org>
Subject: Re: How to revoke privileged from PostgreSQL's superuser
Date: 2018-08-15 20:28:20
Message-ID: CAKFQuwZY8qiPA6oA1EO+2D+6kR=e2z1Tn+Drp8c_+Wn28gU78w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin pgsql-general

On Wednesday, August 15, 2018, Evan Rempel <erempel(at)uvic(dot)ca> wrote:
>
> For security purposes many applications have moved the configuration files
> out of the data folder.
> PHP and MySQL are two that come to mind.
>
> The postgresql.conf and the pg_hba.conf should NOT be stored in the
> database data directory. These files
> should NOT be owned or editable by the postgres user (OS user that
> postmaster is running as).
>

I believe this is a matter of default configuration and that what you
described is possible (if maybe not trivial depend on installation method
and auto-start setup).

David J.

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Evan Rempel 2018-08-15 20:52:43 Re: How to revoke privileged from PostgreSQL's superuser
Previous Message legrand legrand 2018-08-15 20:26:56 Re: Fwd: increase insert into local table from remote oracle table preformance

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2018-08-15 20:31:17 Re: Odd Row Estimates in Query Plan (rows=75)
Previous Message Bruce Momjian 2018-08-15 20:26:46 Re: How to revoke privileged from PostgreSQL's superuser