Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-28 Thread Chad R. Larson
On Tue, Oct 22, 2002 at 05:05:38PM +0200, Igor Georgiev wrote: > or my nightmare a cygwin on Win 98 everybody can can access everything Or =my= nightmare: Anything important on any Windows platform. -crl -- Chad R. Larson (CRL22)[EMAIL PROTECTED] Eldorado Computing, Inc. 602-604

Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-23 Thread dima
edit *pg_hba.conf * # Allow any user on the local system to connect to any # database under any username, but only via an IP connection: host all 127.0.0.1 255.255.255.255trust # The same, over Unix-socket connections: local

Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-22 Thread Tom Lane
"Igor Georgiev" <[EMAIL PROTECTED]> writes: > Ok, but my question actually isn't about pg_hba.conf comments, i read enough > but what will stop root from adding this lines or doing su - postgres ?? As somebody already pointed out, you *must* trust the people with root access to your machine; ther

Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-22 Thread Igor Georgiev
> They can just read the raw database files as well. wow I'm not sure how about this       edit pg_hba.conf         # Allow any user on the local system to connect to any        # database under any username     local    all  trust   su -

Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-22 Thread Stephan Szabo
On Tue, 22 Oct 2002, Igor Georgiev wrote: > > > edit *pg_hba.conf * > > > # Allow any user on the local system to connect to any > > > # database under any username, but only via an IP connection: > > > host all 127.0.0.1 255.255.255.255trust >

Re: [HACKERS] [ADMIN] Security question : Database access control

2002-10-22 Thread Bruno Wolff III
On Tue, Oct 22, 2002 at 17:05:38 +0200, Igor Georgiev <[EMAIL PROTECTED]> wrote: > Is there any way to prevent superuser to acces the database ? > I mean something like "GRANT / REVOKE CONNECT" MECHANISM > > I have no idea how to prevent root from access data in one of this ways : > root @ l