Received: from localhost (unknown [200.46.204.183]) by developer.postgresql.org (Postfix) with ESMTP id 78C3A2E006D for ; Wed, 4 Jun 2008 13:01:56 -0300 (ADT) Received: from developer.postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 96028-03 for ; Wed, 4 Jun 2008 13:01:50 -0300 (ADT) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.29]) by developer.postgresql.org (Postfix) with ESMTP id DAAC52E0060 for ; Wed, 4 Jun 2008 13:01:43 -0300 (ADT) Received: by yw-out-2324.google.com with SMTP id 3so83738ywj.73 for ; Wed, 04 Jun 2008 09:01:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=N781DkvZ1wR+V6u5Ku+FztsqlJrZAMgYM53q2HlPve0=; b=Tbl21V2nPpgSV2skJOdwYfb0EjvmHEHzLK+6LoZ8gFCiGsAVuv3bQuAmE0s1i1VzGw 4AdD6ueI1tHzn0kUPj5yiwJgH6/1PDaYxDjLesmqzjEFjKaZGSXZzzpYJeseFYNdm49M PSbrp7Zia5UbLRR13X7erosq56Fef0rXbHJtQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=kBOIEGHei3jifZ+5J47C1GL4ehF8YAEV0pELIcA86o7Ov0F6ZdgKA4I14dfCTAJvtn +ytqFdvJupymhmvVmj/dE6t3rcHAsshA73a+QndNw9EDvbFvA32yWm0i8gGKGwsmd46X FJ2S2D6UWMwTrtUBqJOtB1acDUevSForBbLyI= Received: by 10.150.154.6 with SMTP id b6mr336817ybe.28.1212595292200; Wed, 04 Jun 2008 09:01:32 -0700 (PDT) Received: by 10.150.186.15 with HTTP; Wed, 4 Jun 2008 09:01:32 -0700 (PDT) Message-ID: <36e682920806040901w15bc075ejda64086da5c3acc9@mail.gmail.com> Date: Wed, 4 Jun 2008 12:01:32 -0400 From: "Jonah H. Harris" To: zferentz@gmail.com Subject: Re: Postgres security issue - protecting datafiles Cc: pgsql-admin@postgresql.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200806/30 X-Sequence-Number: 29368 On Mon, Jun 2, 2008 at 6:16 PM, wrote: > Is there a way to protect the data files, so even the "malicious > administrator" cannot see the data ? Encrypt it. Though, how you store the key will be important. -- Jonah H. Harris, Sr. Software Architect | phone: 732.331.1324 EnterpriseDB Corporation | fax: 732.331.1301 499 Thornall Street, 2nd Floor | jonah.harris@enterprisedb.com Edison, NJ 08837 | http://www.enterprisedb.com/