Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ecX4n-0002tq-Hq for pgsql-performance@arkaria.postgresql.org; Fri, 19 Jan 2018 13:51:25 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ecX4n-0002XS-2D for pgsql-performance@arkaria.postgresql.org; Fri, 19 Jan 2018 13:51:25 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ecX4m-0002XI-RQ for pgsql-performance@lists.postgresql.org; Fri, 19 Jan 2018 13:51:24 +0000 Received: from mail.thelabyrinth.net ([45.56.70.56]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1ecX4k-0003Au-Hv for pgsql-performance@postgresql.org; Fri, 19 Jan 2018 13:51:24 +0000 Received: from Davids-iMac.local (unknown [173.169.74.224]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dsteele) by mail.thelabyrinth.net (Postfix) with ESMTPSA id E5FCB54673; Fri, 19 Jan 2018 13:51:20 +0000 (UTC) Subject: Re: pgaudit and create postgis extension logs a lot inserts To: Svensson Peter , "pgsql-performance@postgresql.org" References: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se> From: David Steele Message-ID: <551c26e7-c683-68b3-bd66-6285e859b7ae@pgmasters.net> Date: Fri, 19 Jan 2018 08:51:20 -0500 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:52.0) Gecko/20100101 Thunderbird/52.5.2 MIME-Version: 1.0 In-Reply-To: <1CC6B04B8F153C4CBE486B1C7FD897430269E49962@WINVMSERV463.ad.smhi.se> Content-Type: text/plain; charset=windows-1252 Content-Language: en-US Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk Hi Peter, On 1/18/18 7:12 AM, Svensson Peter wrote: > > Also noticed that setting a session log to none (set > pgaudit.log='none';)  overrides parameter from postgresql.conf,  but > does not get logged, and then you can do whatever you want without any > audit. > I supposed this changing of  audit session log parameter should be > logged to file? pgaudit is not intended to audit the superuser and only a superuser can set pgaudit.log. However, you can limit superuser access with the setuser extension: https://github.com/pgaudit/set_user Regards, -- -David david@pgmasters.net