From: David Steele <david@pgmasters.net>
To: Svensson Peter <peter.svensson@smhi.se>
To: pgsql-performance@postgresql.org <pgsql-performance@postgresql.org>
Subject: Re: pgaudit and create postgis extension logs a lot inserts
Date: Fri, 19 Jan 2018 08:51:20 -0500
Message-ID: <551c26e7-c683-68b3-bd66-6285e859b7ae@pgmasters.net> (raw)
In-Reply-To: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>
References: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se>
Hi Peter,
On 1/18/18 7:12 AM, Svensson Peter wrote:
>
> Also noticed that setting a session log to none (set
> pgaudit.log='none';) overrides parameter from postgresql.conf, but
> does not get logged, and then you can do whatever you want without any
> audit.
> I supposed this changing of audit session log parameter should be
> logged to file?
pgaudit is not intended to audit the superuser and only a superuser can
set pgaudit.log.
However, you can limit superuser access with the setuser extension:
https://github.com/pgaudit/set_user
Regards,
--
-David
david@pgmasters.net
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-performance@postgresql.org
Cc: david@pgmasters.net, peter.svensson@smhi.se
Subject: Re: pgaudit and create postgis extension logs a lot inserts
In-Reply-To: <551c26e7-c683-68b3-bd66-6285e859b7ae@pgmasters.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox