Re: authentication/privileges - Mailing list pgsql-general

From Alvaro Herrera
Subject Re: authentication/privileges
Date
Msg-id 20130510163207.GB17166@eldon.alvh.no-ip.org
Whole thread Raw
In response to Re: authentication/privileges  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-general
Tom Lane escribió:

> It's fairly common for distro-supplied packages to create a postgres
> OS user but not assign it any password.  In that state, the only way to
> become postgres is to "su" to it from root, or perhaps from a sudoer
> account with root-equivalent privileges.  While that might be okay
> for machines with just one person administering everything, I can't
> say that I think it's recommendable practice in general: you don't
> want to have to give somebody root to let them admin the database.
> Better to give the postgres user a password.

Of course, it's also possible to give multiple people sudo-to-postgres
capability without giving them sudo-to-root.

--
Álvaro Herrera                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services


pgsql-general by date:

Previous
From: Merlin Moncure
Date:
Subject: Re: Deploying PostgreSQL on CentOS with SSD and Hardware RAID
Next
From: "Evan D. Hoffman"
Date:
Subject: Re: Deploying PostgreSQL on CentOS with SSD and Hardware RAID