pg.ddx.io pgsql-admin@postgresql.org mailing list archivehelp / color / mirror / Atom feed
REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC 2+ messages / 2 participants [nested] [flat]
* REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC @ 2010-11-12 00:34 Michal Seidl <michal.seidl@gmail.com> 2010-11-12 01:38 ` Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC Joshua D. Drake <jd@commandprompt.com> 0 siblings, 1 reply; 2+ messages in thread From: Michal Seidl @ 2010-11-12 00:34 UTC (permalink / raw) To: pgsql-admin Hello, I would like to set up database as private as much as possible. The basic problem is that default access for 'PUBLIC' allows any user to get information about other existing databases, users, schemas, tables etc. I think of something like REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC REVOKE ALL ON SCHEMA information_schema FROM PUBLIC but I am not sure about consequences and I did not find any useful information in manual. Thanks Michal ^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC 2010-11-12 00:34 REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC Michal Seidl <michal.seidl@gmail.com> @ 2010-11-12 01:38 ` Joshua D. Drake <jd@commandprompt.com> 0 siblings, 0 replies; 2+ messages in thread From: Joshua D. Drake @ 2010-11-12 01:38 UTC (permalink / raw) To: michal.seidl@gmail.com; +Cc: pgsql-admin On Fri, 2010-11-12 at 01:34 +0100, Michal Seidl wrote: > Hello, > I would like to set up database as private as much as possible. The > basic problem is that default access for 'PUBLIC' allows any user to get > information about other existing databases, users, schemas, tables etc. > > I think of something like > REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC > REVOKE ALL ON SCHEMA information_schema FROM PUBLIC > > but I am not sure about consequences and I did not find any useful > information in manual. That's cause its a bad idea. Try it :D Joshua D. Drake > > Thanks Michal > -- PostgreSQL.org Major Contributor Command Prompt, Inc: http://www.commandprompt.com/ - 509.416.6579 Consulting, Training, Support, Custom Development, Engineering http://twitter.com/cmdpromptinc | http://identi.ca/commandprompt ^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2010-11-12 01:38 UTC | newest] Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2010-11-12 00:34 REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC Michal Seidl <michal.seidl@gmail.com> 2010-11-12 01:38 ` Joshua D. Drake <jd@commandprompt.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions for how to clone and mirror all data and code used for this inbox