Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist - Mailing list pgsql-bugs

From Tom Lane
Subject Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
Date
Msg-id 3525669.1708119351@sss.pgh.pa.us
Whole thread Raw
In response to BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist  (PG Bug reporting form <noreply@postgresql.org>)
Responses BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist  ("Wetmore, Matthew (CTR)" <Matthew.Wetmore@express-scripts.com>)
Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist  (Andrew Dunstan <andrew@dunslane.net>)
List pgsql-bugs
PG Bug reporting form <noreply@postgresql.org> writes:
> We have identified an issue where predefined roles are not modifiable,
> however a Dept. of VA security checklist requires that no roles have
> unlimited connections. The Predefined roles have unlimited connections, is
> there a way to modify these?

Solution 1: explain to your compliance department that it's pointless
to worry about the connection limit for a role that can't log in.

Solution 2: do a manual UPDATE on pg_authid.  This would have to
be done over after any major-version upgrade, though.

            regards, tom lane



pgsql-bugs by date:

Previous
From: "David G. Johnston"
Date:
Subject: Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
Next
From: "Wetmore, Matthew (CTR)"
Date:
Subject: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist