Re: Can we hide data from the superadmin - Mailing list pgsql-hackers

From Alvaro Herrera
Subject Re: Can we hide data from the superadmin
Date
Msg-id 20091230145743.GD3662@alvh.no-ip.org
Whole thread Raw
In response to Re: Can we hide data from the superadmin  ("Tarun Sharma" <tarun.sharma@newgen.co.in>)
List pgsql-hackers
Tarun Sharma wrote:
> hi,
> 
> i assigned super user privelledge to a user by specifing entries in pg_hba.conf file as 
> 
> host    all    newuser    127.1.1.1 md5
> 
> and the default postgres user is made access to only the default postgres databse and is no more the super user.
> 
> the problem is that this conf file is available to all and can be changed again.

It is only available to all if all is somebody who has superuser access
to the operating system, which is something you should avoid.

If you don't trust your OS superuser, there's nothing you can do.

-- 
Alvaro Herrera                                http://www.CommandPrompt.com/
The PostgreSQL Company - Command Prompt, Inc.


pgsql-hackers by date:

Previous
From: Teodor Sigaev
Date:
Subject: Re: point_ops for GiST
Next
From: Teodor Sigaev
Date:
Subject: Re: KNNGiST for knn-search (WIP)