Re: Security Concerns over User 'postgres'

Поиск
Список
Период
Сортировка
От Marcelo Costa
Тема Re: Security Concerns over User 'postgres'
Дата
Msg-id c13f2d590609221238g11b1d578n75f234c7fcfadbdd@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Security Concerns over User 'postgres'  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-admin
Hi,

Only create one user to your aplications and give to her rights to acess your database

You can change the password of postgresql user

In your linux distro type:

su - postgres

psql -U postgres

in the prompt of postgres type:

# alter user postgres with password 'your new password';

After this your password of user postgres are change.

Create an user to your aplications and give this to all users.

Don´t forget of rights (INSERT,SELECT,UPDATE,DELETE) on your tables to this user.

[],s

Marcelo Costa
DBA
Executive Secretary of Education from Pará/Amazônia/Brazil



2006/9/22, Tom Lane <tgl@sss.pgh.pa.us>:
"Lane Van Ingen" <lvaningen@esncc.com> writes:
> We created our PostgreSQL instance by compiling it from source, and the
> instance is working just fine. User postgres runs the service; we do not
> know what the password is, and we think it got created automatically by the
> compile / install process.

Are you sure it even *has* a password?  In the default RPM installation,
user postgres is created without any password --- the only way to become
postgres is to su there from root, and if you've got root you hardly
need to crack into postgres.

                        regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?

               http://www.postgresql.org/docs/faq



--
Marcelo Costa

В списке pgsql-admin по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Security Concerns over User 'postgres'
Следующее
От: "Lane Van Ingen"
Дата:
Сообщение: Re: Security Concerns over User 'postgres'