Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fpmpZ-0005nL-8K for pgsql-admin@arkaria.postgresql.org; Wed, 15 Aug 2018 03:50:45 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fpmpV-0004pt-Kk for pgsql-admin@arkaria.postgresql.org; Wed, 15 Aug 2018 03:50:41 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fpmpV-0004pl-Da for pgsql-admin@lists.postgresql.org; Wed, 15 Aug 2018 03:50:41 +0000 Received: from leghorn.comp.uvic.ca ([142.104.42.108]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fpmpO-0008SG-Jx for pgsql-admin@lists.postgresql.org; Wed, 15 Aug 2018 03:50:38 +0000 Received: from [192.168.1.4] (S01060018f8676393.gv.shawcable.net [70.67.2.161]) (authenticated bits=0) by leghorn.comp.uvic.ca (8.14.4/8.14.4) with ESMTP id w7F3oRK1013531 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Tue, 14 Aug 2018 20:50:27 -0700 Subject: Re: How to revoke privileged from PostgreSQL's superuser To: pgsql-admin@lists.postgresql.org References: <913907.28546.qm@web103014.mail.kks.yahoo.co.jp> <20180810194105.GD7840@momjian.us> <20180814195919.GA29140@momjian.us> <1534294800932-0.post@n3.nabble.com> <18D2AD16-D91B-4DEA-A11B-74651B920624@mac.com> <1534304659867-0.post@n3.nabble.com> From: Evan Rempel Message-ID: <2111116e-292f-9326-034f-ef2b92971372@uvic.ca> Date: Tue, 14 Aug 2018 20:50:27 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <1534304659867-0.post@n3.nabble.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-MW X-UVic-Virus-Scanned: OK - Passed virus scan by ClamAV (clamd) on leghorn X-UVic-Virus-Scanned: OK - Passed virus scan by Sophos (sophie) on leghorn X-UVic-Scan: leghorn.comp.uvic.ca filter_version 3.7.9 X-UVic-Outbound-Scan: leghorn.comp.uvic.ca Not_scanned_Remote X-UVic-Spam-Scan: leghorn.comp.uvic.ca No_recips_rejected X-UVic-Spam-Status: No X-UVic-Spam-Score: 0.167 HELO_MISC_IP X-UVic-Spam-Level: Spam-Level X-Scanned-By: MIMEDefang 2.78 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk In my opinion that is exactly why you log to syslog. The syslog infrastructure can also forward in real time the log events to a remote log collector that the DBAs don't even have access to. This method provides for a secure and prestine log stream for archiving and audit review processes. Evan. On 08/14/2018 08:44 PM, dangal wrote: > From what I saw pgaudit records the postgres log, any dba can modify that log > > > > -- > Sent from: http://www.postgresql-archive.org/PostgreSQL-admin-f2076596.html >