From: Khangelani Gama <kgama@argility.com>
To: Scott Ribe <scott_ribe@elevated-dev.com>
To: David Ondrejik <david.ondrejik@noaa.gov>
Cc: pgsql-admin@postgresql.org
Subject: Re: Update actions (with user name) inside PostgreSQL DB - any version on postgreSQL
Date: Thu, 15 Mar 2012 06:33:45 +0200
Message-ID: <3b5212897344f5b352caff778c965911@mail.gmail.com> (raw)
In-Reply-To: <EDD98FDF-AAC8-48A7-A6AE-C1EE365D2C0E@elevated-dev.com>
References: <8ecc4155e8754edef35e260a60a4a8db@mail.gmail.com>
<1331722455.5503.166.camel@elliot>
<bb7ee57f0e57557867afaf2033816241@mail.gmail.com>
<1331730203.5503.174.camel@elliot>
<CAPVc05NYyTM+fzo+phRBU0W26qdc+Ora5GJ6yui47q5sxocYLw@mail.gmail.com>
<2CA18772-AF64-4147-8825-3E8DB98458AD@elevated-dev.com>
<CAPVc05NLf_615WRcm9UT5iWWuVb0TkN3t_hkWkht-qrHzGPQyw@mail.gmail.com>
<EDD98FDF-AAC8-48A7-A6AE-C1EE365D2C0E@elevated-dev.com>
Thanks to everyone for the ideas, the information you provided me with
was much needed. it's much appreciated.
C O N F I D E N T I A L I T Y N O T I C E
The contents of and attachments to this e-mail are intended for the
addressee only, and may contain the confidential information of Argility
(Proprietary) Limited and/or its subsidiaries. Any review, use or
dissemination thereof by anyone other than the intended addressee is
prohibited. If you are not the intended addressee please notify the writer
immediately and destroy the e-mail. Argility (Proprietary) Limited and its
subsidiaries distance themselves from and accept no liability for
unauthorised use of their e-mail facilities or e-mails sent other than
strictly for business purposes.
-----Original Message-----
From: Scott Ribe [mailto:scott_ribe@elevated-dev.com]
Sent: Wednesday, March 14, 2012 5:47 PM
To: David Ondrejik
Cc: Khangelani Gama; pgsql-admin@postgresql.org
Subject: Re: [ADMIN] Update actions (with user name) inside PostgreSQL DB
- any version on postgreSQL
On Mar 14, 2012, at 9:28 AM, David Ondrejik wrote:
> So there is some trail to track back to the original user.
Yes, but once he has root shell, the trail ends there, and impersonation
of anyone is once again trivial. Also, sudo su root, does work on some
unices, and the option you don't want to advertise is, in my opinion,
trivially obvious--but I'll respect the idea and not advertise it.
--
Scott Ribe
scott_ribe@elevated-dev.com
http://www.elevated-dev.com/
(303) 722-0567 voice
CONFIDENTIALITY NOTICE
The contents of and attachments to this e-mail are intended for the addressee only, and may contain the confidential information of Argility (Proprietary) Limited and/or its subsidiaries. Any review, use or dissemination thereof by anyone other than the intended addressee is prohibited.
If you are not the intended addressee please notify the writer immediately and destroy the e-mail. Argility (Proprietary) Limited and its subsidiaries distance themselves from and accept no liability for unauthorised use of their e-mail facilities or e-mails sent other than strictly for business purposes.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: kgama@argility.com, scott_ribe@elevated-dev.com, david.ondrejik@noaa.gov
Subject: Re: Update actions (with user name) inside PostgreSQL DB - any version on postgreSQL
In-Reply-To: <3b5212897344f5b352caff778c965911@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox