Re: Increasing security in a shared environment ...

Поиск
Список
Период
Сортировка
От Marc G. Fournier
Тема Re: Increasing security in a shared environment ...
Дата
Msg-id 20040329131819.B51637@ganymede.hub.org
обсуждение исходный текст
Ответ на Re: Increasing security in a shared environment ...  (Andrew Dunstan <andrew@dunslane.net>)
Список pgsql-hackers
On Mon, 29 Mar 2004, Andrew Dunstan wrote:

> My previous answer to this question has been "use a middleware layer
> that exposes just the operations you want exposed". But this issue has
> come up a few times so maybe some more thought is needed. Of course, we
> are only talking about metadata here, not user table contents, but maybe
> some people have a justifiable need to hide even the metadata.

You could almost look at it from a security perspective ... if any user
can see all databases, then its simple enough to try and connect to them
all and see which ones are open ... its not hard to 'mis-configure'
pg_hba.conf without realizing it, leaving things open when you meant for
them to be closed ... it would be an added layer of protection ...

Does anyone know how ppl like Oracle handle this?  Are system catalogs
like this open to all users?

----
Marc G. Fournier           Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org           Yahoo!: yscrappy              ICQ: 7615664


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Euler Taveira de Oliveira
Дата:
Сообщение: Re: Increasing security in a shared environment ...
Следующее
От: "Dave Page"
Дата:
Сообщение: Re: Increasing security in a shared environment ...