Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id 713871337B6F for ; Thu, 11 Nov 2010 21:39:03 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 11076-05 for ; Fri, 12 Nov 2010 01:38:56 +0000 (UTC) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from spinlock.commandprompt.com (host-215.commandprompt.net [207.173.203.215]) by mail.postgresql.org (Postfix) with ESMTP id 4EA451336971 for ; Thu, 11 Nov 2010 21:38:56 -0400 (AST) Received: from localhost (localhost [127.0.0.1]) by spinlock.commandprompt.com (Postfix) with ESMTP id 58245348023; Thu, 11 Nov 2010 17:38:54 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at commandprompt.com Received: from spinlock.commandprompt.com ([127.0.0.1]) by localhost (spinlock.commandprompt.com.commandprompt.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z50XsI-fGgk5; Thu, 11 Nov 2010 17:38:51 -0800 (PST) Received: from [192.168.1.100] (unknown [71.94.248.62]) by spinlock.commandprompt.com (Postfix) with ESMTPSA id AA039348022; Thu, 11 Nov 2010 17:38:51 -0800 (PST) Subject: Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC From: "Joshua D. Drake" Reply-To: jd@commandprompt.com To: michal.seidl@gmail.com Cc: pgsql-admin@postgresql.org In-Reply-To: <4CDC8B93.7070705@gmail.com> References: <4CDC8B93.7070705@gmail.com> Content-Type: text/plain; charset="UTF-8" Organization: Command Prompt, Inc. Date: Thu, 11 Nov 2010 17:38:49 -0800 Message-ID: <1289525929.4869.6.camel@jd-desktop> Mime-Version: 1.0 X-Mailer: Evolution 2.30.3 Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-10 required=5 tests=BAYES_00=-1.9 X-Spam-Level: X-Archive-Number: 201011/90 X-Sequence-Number: 36056 On Fri, 2010-11-12 at 01:34 +0100, Michal Seidl wrote: > Hello, > I would like to set up database as private as much as possible. The > basic problem is that default access for 'PUBLIC' allows any user to get > information about other existing databases, users, schemas, tables etc. > > I think of something like > REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC > REVOKE ALL ON SCHEMA information_schema FROM PUBLIC > > but I am not sure about consequences and I did not find any useful > information in manual. That's cause its a bad idea. Try it :D Joshua D. Drake > > Thanks Michal > -- PostgreSQL.org Major Contributor Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579 Consulting, Training, Support, Custom Development, Engineering http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt