Re: Securing Postgres - Mailing list pgsql-general

From Tom Lane
Subject Re: Securing Postgres
Date
Msg-id 18932.1128525771@sss.pgh.pa.us
Whole thread Raw
In response to Re: Securing Postgres  (L van der Walt <mailing@lani.co.za>)
Responses Re: Securing Postgres  (Berend Tober <btober@seaworthysys.com>)
List pgsql-general
L van der Walt <mailing@lani.co.za> writes:
> The big problem is that the administrators works for the client and not
> for me.  I don't want the client to reverse engineer my database.
> There might be other applications on the server so the administrators do
> require root access.
> About the raw database files,  I can use encryption to protect the data.

If you think encryption will protect you against someone with root
privileges, you're sadly mistaken.  They could, for example, attach
to your process with a debugger and examine the decrypted data appearing
within its memory space.  Or just capture the decryption key that way,
and then study the files at their leisure.

All the same points hold for SQL Server of course --- the fact that you
weren't aware of these risks doesn't mean they don't exist.

            regards, tom lane

pgsql-general by date:

Previous
From: "Stefan 'Kaishakunin' Schumacher"
Date:
Subject: Re: Securing Postgres
Next
From: L van der Walt
Date:
Subject: Re: Securing Postgres