Permissions/security on pg_* tables? - Mailing list pgsql-admin

From Dax Kelson
Subject Permissions/security on pg_* tables?
Date
Msg-id Pine.LNX.4.02A.9811152255070.8418-100000@brookie.inconnect.com
Whole thread Raw
In response to New to PostgreSQL, is this a DoS?  (Dax Kelson <dkelson-list-pgsql-admin@inconnect.com>)
List pgsql-admin
Is it normal/desirable for any user to be able to select (haven't tried
insert/update) in the pg_* tables?

Is it possible to GRANT/REVOKE on the pg_* tables?  It seems it is.  How
can you see the permissions if \z doesn't work on the pg_* tables?

Given a multi-user environment were each user (and the sysadmin) values
security quite highly, what is the best way to secure PostgreSQL as
tightly as possible (not just looking at data in tables, but general
snooping around)?

In pg_hba.conf under "host" the second parameter is "dbname".  Is it
possible to have a list of databases?

Ie:

host   db1,db2,db3     10.0.0.3   255.255.255.255 crypt

Or is it limited to (all|samename|onedbname)?

Thanks for your help,
Dax Kelson
Internet Connect, Inc.


pgsql-admin by date:

Previous
From: Dax Kelson
Date:
Subject: Re: [ADMIN] New to PostgreSQL, is this a DoS?
Next
From: Alex Vorobiev
Date:
Subject: syntax error 2299 creating template db; making RPM/Linux