Re: Can we hide data from the superadmin

Поиск
Список
Период
Сортировка
От Alvaro Herrera
Тема Re: Can we hide data from the superadmin
Дата
Msg-id 20091230145743.GD3662@alvh.no-ip.org
обсуждение исходный текст
Ответ на Re: Can we hide data from the superadmin  ("Tarun Sharma" <tarun.sharma@newgen.co.in>)
Список pgsql-hackers
Tarun Sharma wrote:
> hi,
> 
> i assigned super user privelledge to a user by specifing entries in pg_hba.conf file as 
> 
> host    all    newuser    127.1.1.1 md5
> 
> and the default postgres user is made access to only the default postgres databse and is no more the super user.
> 
> the problem is that this conf file is available to all and can be changed again.

It is only available to all if all is somebody who has superuser access
to the operating system, which is something you should avoid.

If you don't trust your OS superuser, there's nothing you can do.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Teodor Sigaev
Дата:
Сообщение: Re: point_ops for GiST
Следующее
От: Teodor Sigaev
Дата:
Сообщение: Re: KNNGiST for knn-search (WIP)