Re: Postgres security issue - protecting datafiles

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Postgres security issue - protecting datafiles
Дата
Msg-id 25650.1212595910@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Postgres security issue - protecting datafiles  (zferentz@gmail.com)
Ответы Re: Postgres security issue - protecting datafiles
Список pgsql-admin
zferentz@gmail.com writes:
> I'd like to use postgres to store my secret data  in a way that only
> me (the DBA, owner of the table) can access the talbe while the root
> (system administrator) who installed and maintains the server - will
> not be able to see the data.

If you think you can hide anything on a machine from its root admin,
I have a bridge I'd like to sell you ...

The only thing you could do along this line is to use the database as a
dumb container for encrypted data that you decrypt only on the client
side, using keys that are never sent to the database server.
Unfortunately that approach loses most of the benefit of using a
database in the first place, since you can hardly do any useful
processing on data that you can't decrypt.

            regards, tom lane

В списке pgsql-admin по дате отправления:

Предыдущее
От: Marcin Kasperski
Дата:
Сообщение: Re: Postgres security issue - protecting datafiles
Следующее
От: "Kevin Grittner"
Дата:
Сообщение: tsearch2 dictionary for statute cites