pg.ddx.io  pgsql-admin@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Evan Rempel <erempel@uvic.ca>
To: pgsql-admin@lists.postgresql.org
Subject: Re: How to revoke privileged from PostgreSQL's superuser
Date: Tue, 14 Aug 2018 20:50:27 -0700
Message-ID: <2111116e-292f-9326-034f-ef2b92971372@uvic.ca> (raw)
In-Reply-To: <1534304659867-0.post@n3.nabble.com>
References: <913907.28546.qm@web103014.mail.kks.yahoo.co.jp>
	<CAKFQuwa0SyyzaKEtQzBc008HvtR7GVzv4Nd75Qe_OXtAqzgGGA@mail.gmail.com>
	<20180810194105.GD7840@momjian.us>
	<CAD+mzow89NrETPt57G21BN9cdf90uHYGnCiC_8wR8REoudnt5g@mail.gmail.com>
	<20180814195919.GA29140@momjian.us>
	<1534294800932-0.post@n3.nabble.com>
	<18D2AD16-D91B-4DEA-A11B-74651B920624@mac.com>
	<1534304659867-0.post@n3.nabble.com>

In my opinion that is exactly why you log to syslog. The syslog 
infrastructure can also
forward in real time the log events to a remote log collector that the 
DBAs don't even
have access to. This method provides for a secure and prestine log 
stream for archiving
and audit review processes.

Evan.

On 08/14/2018 08:44 PM, dangal wrote:
>  From what I saw pgaudit records the postgres log, any dba can modify that log
>
>
>
> --
> Sent from: http://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html
>





view thread (40+ messages)  latest in thread

Message-ID: <2111116e-292f-9326-034f-ef2b92971372@uvic.ca>
Permalink:  ../2111116e-292f-9326-034f-ef2b92971372@uvic.ca/
Also on:    postgresql.org/message-id/2111116e-292f-9326-034f-ef2b92971372@uvic.ca

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-admin@postgresql.org
  Cc: erempel@uvic.ca, pgsql-admin@lists.postgresql.org
  Subject: Re: How to revoke privileged from PostgreSQL's superuser
  In-Reply-To: <2111116e-292f-9326-034f-ef2b92971372@uvic.ca>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox