Re: pg_hba.conf alternative

Поиск
Список
Период
Сортировка
От Q Beukes
Тема Re: pg_hba.conf alternative
Дата
Msg-id 43EBE4A7.508@list.za.net
обсуждение исходный текст
Ответ на Re: pg_hba.conf alternative  (korry <korry@starband.net>)
Ответы Re: pg_hba.conf alternative  (Rick Gigger <rick@alpinenetworking.com>)
Список pgsql-hackers
I did consider that, but the software we use (which again uses postgresql)
atm only supports local connection to the database.

I am the database admin, the other admins just manage stuff like user
accounts,
checking logs, etc...

Unfortunately there is no other way to set it up, and like I mentioned
government security is not required.

I did however statically code the pg_hba.conf file into pg binaries.

The only way I found to access the db now would be to replace the binary
and
possibly sniffing traffic. But we're not worried about that. They not really
criminally minded people.

thx for everyones help anyway ;>


korry wrote:

>>Why would you not simply set this up on a seperate machine to which only
>>the trusted admins had access? Most data centers I am familiar with use
>>single purpose machines anyway. If someone is trusted as root on your
>>box they can screw you no matter what you do. Pretending otherwise is
>>just folly.
>>    
>>
>
>Agreed - that would be a much better (easier and more secure) solution where 
>practical.
>
>            -- Korry
>
>---------------------------(end of broadcast)---------------------------
>TIP 3: Have you checked our extensive FAQ?
>
>               http://www.postgresql.org/docs/faq
>
>  
>



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Simon Riggs
Дата:
Сообщение: Scrollable cursors and Sort performance
Следующее
От: Andrew Dunstan
Дата:
Сообщение: Re: Compiling UDF DLL under Win32