Received: from localhost (unknown [200.46.204.183]) by developer.postgresql.org (Postfix) with ESMTP id 190582E0060 for ; Wed, 4 Jun 2008 13:05:58 -0300 (ADT) Received: from developer.postgresql.org ([200.46.204.71]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 01149-01 for ; Wed, 4 Jun 2008 13:05:54 -0300 (ADT) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by developer.postgresql.org (Postfix) with ESMTP id 801652E0071 for ; Wed, 4 Jun 2008 13:05:54 -0300 (ADT) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1K3vUj-0007Nd-2P for pgsql-admin@postgresql.org; Wed, 04 Jun 2008 16:05:49 +0000 Received: from mekk.waw.pl ([82.195.149.110]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 04 Jun 2008 16:05:49 +0000 Received: from Marcin.Kasperski by mekk.waw.pl with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 04 Jun 2008 16:05:49 +0000 X-Injected-Via-Gmane: http://gmane.org/ To: pgsql-admin@postgresql.org From: Marcin Kasperski Subject: Re: Postgres security issue - protecting datafiles Date: Wed, 04 Jun 2008 18:09:48 +0200 Lines: 18 Message-ID: <87lk1lrxkj.fsf@softax.com.pl> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: mekk.waw.pl User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.1 (gnu/linux) Cancel-Lock: sha1:zV5eQIsS/99GaWftg3w1H0zrz3c= X-Virus-Scanned: Maia Mailguard 1.0.1 X-Archive-Number: 200806/32 X-Sequence-Number: 29370 > Now, I think that "db authentication" is simply not enough , because > the administrator can copy the data files to his own machine (where he > is the owner of the database). Or just change pg_hba.conf to his taste.... > Is there a way to protect the data files, so even the "malicious > administrator" cannot see the data ? Encrypt it. And keep the key on some other machine. And plan your application so decryption happens on some other machine -- ---------------------------------------------------------------------- | Marcin Kasperski | Communication takes place between people, | http://mekk.waw.pl | documents are secondary. (Booch) | | ----------------------------------------------------------------------