Example: On a MS Windows Server with MS SQL Server. The administrator
with the administrator username and password can not access the SQL
server data. He also needs the SA username and password for the SQL
server to do so. He can stop and start the server and so on but not
access the data.
How do I secure a system in the same way with Linux and PostgreSQL.
Richard Huxton wrote:
> L van der Walt wrote:
>
>> I would like to secure Postgres completly.
>>
>> Some issues that I don't know you to fix:
>> 1. User postgres can use psql (...) to do anything.
>
>
>
> Prevent anyone from logging in as user postgres.
> Remove psql.
>
>> 2. User root can su to postgres and thus do anything.
>
>
>
> That's the root user - it is supposed to be able to do what it likes.
>
>> 3. Disable all tools like pg_dump
>
>
>
> You can delete the executables, but that's not going to stop people
> running their own version if they can connect.
>
>> How do I secure a database if I don't trust the administrators.
>> The administrator will not break the db but they may not view
>> any information in the databse.
>
>
>
> If you don't trust the administrators of the machine, there's nothing
> you can do if they have physical access to it. They'll always be able
> to work around anything you can do.
>
> Can you say more about the situation - it might be someone has been in
> a similar situation themselves?
> --
> Richard Huxton
> Archonet Ltd
>
>
