From: Tom Lane <tgl@sss.pgh.pa.us>
To: Jan Lentfer <Jan.Lentfer@web.de>
Cc: c k <shreeseva.learning@gmail.com>
Cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: Disable TRUST authentication mode
Date: Sat, 10 Mar 2012 11:20:30 -0500
Message-ID: <22060.1331396430@sss.pgh.pa.us> (raw)
In-Reply-To: <4F5B730E.4020402@web.de>
References: <CAN2Y=uMt7CPkxZhAUfw7SzecKdWCWsUuLmh4XPhUxKqBtdUoyA@mail.gmail.com>
<4F5B6EB6.9080507@web.de>
<4F5B7033.4010502@web.de>
<CAN2Y=uMTg1YaT-=3jQGNafA84spi=fPQ=-3B+GP0raq=oWvZmA@mail.gmail.com>
<4F5B730E.4020402@web.de>
Jan Lentfer <Jan.Lentfer@web.de> writes:
> Am 10.03.2012 16:21, schrieb c k:
>> It we can disable the TRUST mode then every user have to login with
>> password and every fraud user have to know the password (at least) of
>> the user. It is not the case that users from other departments share
>> their passwords, but fraud users just bypasses the need to know the
>> password.
> If they can alter pg_hba.conf they can almost certainly also change/add
> users, alter passwords, etc, etc... So from a security perspective it
> doesn't buy you much.
Somebody who has the ability to rewrite pg_hba.conf could also go in and
physically alter the database files -- those are in the same directory
tree, with the same ownership and permissions, as pg_hba.conf. If you
cannot trust people who have that level of access, you have a problem
that software cannot solve for you. You need to rethink who has got
access to the machine running the database server, or at least who has
got root on it.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: tgl@sss.pgh.pa.us, Jan.Lentfer@web.de, shreeseva.learning@gmail.com
Subject: Re: Disable TRUST authentication mode
In-Reply-To: <22060.1331396430@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox