pg_hba.conf alternative

Поиск
Список
Период
Сортировка
От Q Beukes
Тема pg_hba.conf alternative
Дата
Msg-id 43E9E555.50301@list.za.net
обсуждение исходный текст
Ответы Re: pg_hba.conf alternative  (Devrim GUNDUZ <devrim@commandprompt.com>)
Re: pg_hba.conf alternative  (Csaba Nagy <nagy@ecircle-ag.com>)
Re: pg_hba.conf alternative  (Martijn van Oosterhout <kleptog@svana.org>)
Re: pg_hba.conf alternative  ("Mark Woodward" <pgsql@mohawksoft.com>)
Re: pg_hba.conf alternative  (Andrew Dunstan <andrew@dunslane.net>)
Список pgsql-hackers
Hello,

Is there not some other alternative to pg_hba.conf?

I have the problem where the system administrators at our company
obviously have access to the whole filesystem, and our database records
needs to be hidden even from them.

With pg_hba.conf that is not possible, as they just change all the conf
lines to "trust" auth and viola they have access to the database without
passwords.

Is there a more secure alternative to this? The perfect scenario being
to deny everyone include "root" access to a database without a password.

regards,
Quintin Beukes


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Andrew Rawnsley
Дата:
Сообщение: Re: streamlined standby procedure
Следующее
От: Devrim GUNDUZ
Дата:
Сообщение: Re: pg_hba.conf alternative