pg.ddx.io pgsql-interfaces@postgresql.org mailing list archive
help / color / mirror / Atom feedProblem: Security loose
2+ messages / 2 participants
[nested] [flat]
* Problem: Security loose
@ 2001-05-11 13:23 Ravil Aitov <ravil@pi8plus.ru>
0 siblings, 1 reply; 2+ messages in thread
From: Ravil Aitov @ 2001-05-11 13:23 UTC (permalink / raw)
To: pgsql-interfaces
Any user can connect to server (postgresql-7.1) as "postgres" using Perl
interface:
----
use Pg;
$conn = Pg::connectdb("dbname=mydb user=postgres");
(and make there anything!)
----
How it can be eliminated?
Ravil D. Aitov
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: Problem: Security loose
@ 2001-05-13 03:07 Tom Lane <tgl@sss.pgh.pa.us>
parent: Ravil Aitov <ravil@pi8plus.ru>
0 siblings, 0 replies; 2+ messages in thread
From: Tom Lane @ 2001-05-13 03:07 UTC (permalink / raw)
To: Ravil Aitov <ravil@pi8plus.ru>; +Cc: pgsql-interfaces
"Ravil Aitov" <ravil@pi8plus.ru> writes:
> Any user can connect to server (postgresql-7.1) as "postgres" using Perl
> interface:
Don't use "trust" authentication mode in pg_hba.conf if you don't trust
your users.
regards, tom lane
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2001-05-13 03:07 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2001-05-11 13:23 Problem: Security loose Ravil Aitov <ravil@pi8plus.ru>
2001-05-13 03:07 ` Tom Lane <tgl@sss.pgh.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox