From: Marcin Kasperski <Marcin.Kasperski@softax.com.pl>
To: pgsql-admin@postgresql.org
Subject: Re: Postgres security issue - protecting datafiles
Date: Wed, 04 Jun 2008 18:09:48 +0200
Message-ID: <87lk1lrxkj.fsf@softax.com.pl> (raw)
References: <ce1722a1-ab34-4915-b5db-1915c0dfa5b0@f63g2000hsf.googlegroups.com>
> Now, I think that "db authentication" is simply not enough , because
> the administrator can copy the data files to his own machine (where he
> is the owner of the database).
Or just change pg_hba.conf to his taste....
> Is there a way to protect the data files, so even the "malicious
> administrator" cannot see the data ?
Encrypt it. And keep the key on some other machine. And plan your
application so decryption happens on some other machine
--
----------------------------------------------------------------------
| Marcin Kasperski | Communication takes place between people,
| http://mekk.waw.pl | documents are secondary. (Booch)
| |
----------------------------------------------------------------------
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: Marcin.Kasperski@softax.com.pl
Subject: Re: Postgres security issue - protecting datafiles
In-Reply-To: <87lk1lrxkj.fsf@softax.com.pl>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox