Re: PostgreSQL security concerns
От | Peter Eisentraut |
---|---|
Тема | Re: PostgreSQL security concerns |
Дата | |
Msg-id | Pine.LNX.4.30.0105312311050.757-100000@peter.localdomain обсуждение исходный текст |
Ответ на | Re: PostgreSQL security concerns (Ken Causey <ken@ineffable.com>) |
Ответы |
Re: PostgreSQL security concerns
|
Список | pgsql-general |
Ken Causey writes: > The situation is that of a shared webserver and a shared SQL server. > Access to the SQL server is limited to the webserver already. Users can > only run CGI scripts which will of course execute as the webserver user. > What I'm looking for is restricting access by postgresql user. All logins > will be coming from the same host and same host user. I don't > see this capability as part of pg_hba.conf. Did I miss it? You need to configure the pg_hba.conf entries so they only succeed for particular users. If the web server and the database server run on the same host then it might be easiest to connect through Unix domain sockets and restrict access by using the file permission bits. -- Peter Eisentraut peter_e@gmx.net http://funkturm.homeip.net/~peter
В списке pgsql-general по дате отправления: