On 04/07/11 7:31 AM, Michael Gould wrote:
We wouldn't make any of the system users a superuser in Postgres


are you providing software run on a customers box, or a turnkey managed system (hardware+software) ?

anyone who has root access can easily gain database access. anyone with physical access to the box and its console can gain root access. anyone with access to pg_dumpall backup files has access to your stored procedures, too.



--
Sent via pgsql-general mailing list (pgsql-general@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-general

Reply via email to