Re: database file encryption - Mailing list pgsql-general

From Christopher Browne
Subject Re: database file encryption
Date
Msg-id 87psf7toxb.fsf@wolfe.cbbrowne.com
Whole thread Raw
In response to database file encryption  ("Stefano B." <stefano.bonnin@comai.to>)
Responses Re: database file encryption
List pgsql-general
Martha Stewart called it a Good Thing when kleptog@svana.org (Martijn van Oosterhout) wrote:
> On Fri, Aug 11, 2006 at 09:47:49AM +0200, Stefano B. wrote:
>> Hi all,
>>
>> I have just discovered that in postgres database file the data are
>> not encrypted. If I open with a text editor these files I can read
>> the records values.
>>
>> I'd like to know if there is a way in order to encrypt these data.
>
> Sure, run postgres over an encrypted filesystem.

Actually, that may not work the way you think it does...

As long as the encrypted filesystem is mounted, you can access the
unencrypted data

>> PS. for example in mysql the database file are not readable.
>
> Odd, I just opened a random mysql file here in a text editor and I
> could read the strings just fine.

The method that consistently works is to encrypt the data before
putting it in the database so that the DBMS is unaware of what the
plaintext form is...
--
output = reverse("moc.liamg" "@" "enworbbc")
http://linuxdatabases.info/info/slony.html
"Linux:  the  operating  system  with  a CLUE...   Command  Line  User
Environment".  (seen in a posting in comp.software.testing)

pgsql-general by date:

Previous
From: Michael Fuhr
Date:
Subject: Re: Connection string
Next
From: Alban Hertroys
Date:
Subject: Re: Help.