Hi Peter,
On 1/18/18 7:12 AM, Svensson Peter wrote:
>
> Also noticed that setting a session log to none (set
> pgaudit.log='none';) overrides parameter from postgresql.conf, but
> does not get logged, and then you can do whatever you want without any
> audit.
> I supposed this changing of audit session log parameter should be
> logged to file?
pgaudit is not intended to audit the superuser and only a superuser can
set pgaudit.log.
However, you can limit superuser access with the setuser extension:
https://github.com/pgaudit/set_user
Regards,
--
-David
david@pgmasters.net