Re: solution to make static changes in pg_hba.conf file? - Mailing list pgsql-hackers

From Magnus Hagander
Subject Re: solution to make static changes in pg_hba.conf file?
Date
Msg-id 9837222c0912300423l27cce4dbyb6a6da8e7f4d9d9c@mail.gmail.com
Whole thread Raw
In response to solution to make static changes in pg_hba.conf file?  ("Tarun Sharma" <tarun.sharma@newgen.co.in>)
List pgsql-hackers
2009/12/30 Tarun Sharma <tarun.sharma@newgen.co.in>:
> hi,
>
> i assigned super user privelledge to a user by specifing entries in pg_hba.conf file as
>
> host    all    newuser    127.1.1.1 md5
>
> and the default postgres user is made access to only the default postgres databse and is no more the super user.
>
> the problem is that this conf file is available to all and can be changed again.
>
> can someone assist me with a solution to make this changes static.

Only root, or someone who at least has full permissions on the
PostgreSQL datafiles, can do this by default. If you have granted
other users access to do it, you sohuld revoke those. One way can be
to move the pg_hba.conf file to a different directory and lock down
the permissions there.

-- Magnus HaganderMe: http://www.hagander.net/Work: http://www.redpill-linpro.com/


pgsql-hackers by date:

Previous
From: Heikki Linnakangas
Date:
Subject: Re: Cancelling idle in transaction state
Next
From: Kris Jurka
Date:
Subject: Re: Cancelling idle in transaction state