From: Frank Lanitz <frank@frank.uvena.de>
To: pgsql-admin@postgresql.org
Subject: Re: Disable TRUST authentication mode
Date: Sat, 10 Mar 2012 16:26:59 +0100
Message-ID: <20120310162659.c9340f98be1ffb540f277ea4@frank.uvena.de> (raw)
In-Reply-To: <CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
References: <CAN2Y=uMt7CPkxZhAUfw7SzecKdWCWsUuLmh4XPhUxKqBtdUoyA@mail.gmail.com>
<4F5B6EB6.9080507@web.de>
<4F5B7033.4010502@web.de>
<CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
On Sat, 10 Mar 2012 20:51:58 +0530
c k <shreeseva.learning@gmail.com> wrote:
> It we can disable the TRUST mode then every user have to login with
> password and every fraud user have to know the password (at least) of
> the user. It is not the case that users from other departments share
> their passwords, but fraud users just bypasses the need to know the
> password.
Users that are able to change pg_hba.conf are most likely also able to
replace any binary at the system. Even you are right that the trust
option is a bit dangerous, but its not your root issue.
Cheers,
Frank
--
Frank Lanitz <frank@frank.uvena.de>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: frank@frank.uvena.de
Subject: Re: Disable TRUST authentication mode
In-Reply-To: <20120310162659.c9340f98be1ffb540f277ea4@frank.uvena.de>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox