Re: pg_hba.conf alternative

Поиск
Список
Период
Сортировка
От Tino Wildenhain
Тема Re: pg_hba.conf alternative
Дата
Msg-id 43F040CA.2050209@wildenhain.de
обсуждение исходный текст
Ответ на Re: pg_hba.conf alternative  (Q Beukes <pgsql-dev@list.za.net>)
Ответы Re: pg_hba.conf alternative  (Rick Gigger <rick@alpinenetworking.com>)
Список pgsql-hackers
Q Beukes schrieb:
> how? is there some kernel patch to completely to enable you to deny
> access to root?
> Tino Wildenhain pointed out SELinux has a feature like that.

I still dont get your problem (apart from that you can always
google for SELinux)

Why arent the other "admins" not trustworthy? And why do you
have many of them? If they only check logs and create users,
why do they have to be admins? They could use carefully
configured sudo as well to fullfill their tasks w/o full
access to the system.

I'd say, grep your problem at the root (literally spoken)

Regards
Tino


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Q Beukes
Дата:
Сообщение: Re: pg_hba.conf alternative
Следующее
От: Rick Gigger
Дата:
Сообщение: Re: pg_hba.conf alternative