Received: from maia.hub.org (maia-3.hub.org [200.46.204.243]) by mail.postgresql.org (Postfix) with ESMTP id B3A5F1337B94 for ; Thu, 11 Nov 2010 20:34:24 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by maia.hub.org (mx1.hub.org [200.46.204.243]) (amavisd-maia, port 10024) with ESMTP id 71956-09 for ; Fri, 12 Nov 2010 00:34:17 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from mail-fx0-f46.google.com (mail-fx0-f46.google.com [209.85.161.46]) by mail.postgresql.org (Postfix) with ESMTP id 361BF1337B68 for ; Thu, 11 Nov 2010 20:34:16 -0400 (AST) Received: by fxm16 with SMTP id 16so1884039fxm.19 for ; Thu, 11 Nov 2010 16:34:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:reply-to :user-agent:mime-version:to:subject:content-type :content-transfer-encoding; bh=07uVJRU5jTvbrb/xs4zXjmuVDdhMWDsewoKBqxI4YXI=; b=gWcFquggTNBZr7ax4uv52lN7WyAj361GrNvaNziJFGMZdmyVvQTm2PtOfRjJ4980oe IT1lkTDa4W2VH/2rHQXZL0Qp/jTJPgeUVb2WJPTPCKkjcVvBMV0lUv911Rbdlry2uDsY D9lJAiu+kAh3saY4Elm6g1s/E8ZAaDmD6utRQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:reply-to:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; b=e+TjfZo9QgT03HyxMA0dO/VJSQ5MBKu4J85k2I6gXdZWh+EvjG+6o4cMTIY/CUECm7 mINaZWtn020dlb2JzWwCtVU11LKIEbDYHv0AjvL9YVgMkI6Netuw7F+5X5mUeSIxBISI 3rzN915j/TEQAI3lKD0tGTnNomgELABpwNngA= Received: by 10.223.97.7 with SMTP id j7mr44995fan.41.1289522056314; Thu, 11 Nov 2010 16:34:16 -0800 (PST) Received: from [192.168.168.100] (111.124.broadband6.iol.cz [88.101.124.111]) by mx.google.com with ESMTPS id y13sm1176012fah.2.2010.11.11.16.34.14 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 11 Nov 2010 16:34:15 -0800 (PST) Message-ID: <4CDC8B93.7070705@gmail.com> Date: Fri, 12 Nov 2010 01:34:27 +0100 From: Michal Seidl Reply-To: michal.seidl@gmail.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: pgsql-admin@postgresql.org Subject: REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=-1.9 tagged_above=-10 required=5 tests=BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001 X-Spam-Level: X-Archive-Number: 201011/89 X-Sequence-Number: 36055 Hello, I would like to set up database as private as much as possible. The basic problem is that default access for 'PUBLIC' allows any user to get information about other existing databases, users, schemas, tables etc. I think of something like REVOKE ALL ON SCHEMA pg_catalog FROM PUBLIC REVOKE ALL ON SCHEMA information_schema FROM PUBLIC but I am not sure about consequences and I did not find any useful information in manual. Thanks Michal