Re: PostgreSQL security concerns

Ken Causey writes:

> The situation is that of a shared webserver and a shared SQL server.
> Access to the SQL server is limited to the webserver already.  Users can
> only run CGI scripts which will of course execute as the webserver user.
> What I'm looking for is restricting access by postgresql user.  All logins
> will be coming from the same host and same host user.  I don't
> see this capability as part of pg_hba.conf.  Did I miss it?

You need to configure the pg_hba.conf entries so they only succeed for
particular users.  If the web server and the database server run on the
same host then it might be easiest to connect through Unix domain sockets
and restrict access by using the file permission bits.

--
Peter Eisentraut   peter_e@gmx.net   http://funkturm.homeip.net/~peter