[ADMIN] Ре:Pgadmin II

2003-01-06 Thread Igor Georgiev
>I also installed iodbc like in the howto ... You need iodbc only if you establish an ODBC connection from ur linux box   > The problem comes into play when i try to establish a tcp/ip connection from windows The point is tcp/ip postmaster -i -i option aloow accept tcp/ip connections

Re: [ADMIN] [HACKERS] Security question : Database access control

2002-10-25 Thread Igor Georgiev
> Next your going to ask what will stop root from stopping your > PostgreSQL, compiling a second copy with authentication disabled and > using your data directory as it's source :) He he somebody can blow up ur home with C4, but this don't stop you from locking ur door !?! -

Re: [ADMIN] [HACKERS] Security question : Database access control

2002-10-22 Thread Igor Georgiev
> Next your going to ask what will stop root from stopping your> PostgreSQL, compiling a second copy with authentication disabled and> using your data directory as it's source :)   He he i'm enough paranoic :)) > If you want to prevent root from accomplishing these things, you're> going to h

Re: [ADMIN] Security question : Database access control

2002-10-22 Thread Igor Georgiev
> They can just read the raw database files as well. wow I'm not sure how about this       edit pg_hba.conf         # Allow any user on the local system to connect to any        # database under any username     local    all  trust   su -

Re: [ADMIN] Quickie about Database locations

2002-10-22 Thread Igor Georgiev
Title: Gareth Stationery Hey all! I'm muddled up about something. I'm creating a new database, and absolute paths are disallowed. Therefore I su to postgres ( the owner of the service ) and run the following:   export PGDATA2=/bla/bla/bla initlocation PGDATA2   initloca

Re: [ADMIN] Security question : Database access control

2002-10-22 Thread Igor Georgiev
> > edit *pg_hba.conf *> > # Allow any user on the local system to connect to any> > # database under any username, but only via an IP connection:> > host all 127.0.0.1 255.255.255.255    trust > > # The same, over Unix-sock

[ADMIN] Security question : Database access control

2002-10-22 Thread Igor Georgiev
Is there any way to prevent superuser to acces the database ? I mean something like "GRANT / REVOKE CONNECT" MECHANISM   I have no idea how to prevent root from access data in one of this ways :     root @ linux:~#su - postgres     postgres @ linux:/usr/local/pgsql/bin$pg_dump or     e