Re: Rename or Removing Postgres user

Поиск
Список
Период
Сортировка
От Tim Cross
Тема Re: Rename or Removing Postgres user
Дата
Msg-id CAC=50j8dP__7On9NT8uQ1QPjNM+nyVb-buKxTs5mqjOjppgSdQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Rename or Removing Postgres user  (Devendra Yadav <devendra.857@gmail.com>)
Ответы Re: Rename or Removing Postgres user  (Devendra Yadav <devendra.857@gmail.com>)
Список pgsql-admin

On Thu, 14 Feb 2019 at 23:15, Devendra Yadav <devendra.857@gmail.com> wrote:
Dear Shreeyansh,

Thanks a lot for your advice. I did it the same way you mentioned. Please share if it has any pull off.


Dear John,

One of the main reason behind it is majorly Security. Can you help me with the effects of doing so.

Thanks & Regards,
Devendra

Changing the name or disabling postgres is not going to have any appreciable impact on improving security - in fact, you run the risk of reducing security and potentially introducing other problems because you are going to make your environment bespoke and possibly more complex to work with. Many security weaknesses are the result of simple admin errors rather than due to 'evit doers' attacking your system. Bottom line is that all your database administrator accounts need to be hardened and secure regardless of what name is used. By changing the name, you run the risk that the account won't be included in audits and other security checks or administrators will not recognise the level of sensitivity which should be applied to the account. Far better off to use the standard account, but make sure it is locked down with multiple layers of security. 
--
regards,

Tim

--
Tim Cross

В списке pgsql-admin по дате отправления:

Предыдущее
От: Laurenz Albe
Дата:
Сообщение: Re: Rename or Removing Postgres user
Следующее
От:
Дата:
Сообщение: Table Drop Error