Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Albe Laurenz
Eduardo Henrique wrote: Hi, I'm developing a Graduation Work about Database security. My idea is develop an application that connect in an database (in this case Postgres) and make some security verification of that db. The problem is that my verification only can be in a dabatase scope.

Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Tom Lane
Albe Laurenz laurenz.a...@wien.gv.at writes: Here is my personal security checklist for PostgreSQL: - Check that there is no SQL function with SECURITY DEFINER. Uh, that seems a pretty strange restriction. Generally, if you are actually concerned about security at the SQL-command level,

Re: [GENERAL] Postgres Security Checklist

2009-04-06 Thread Albe Laurenz
Tom Lane wrote: Here is my personal security checklist for PostgreSQL: - Check that there is no SQL function with SECURITY DEFINER. Uh, that seems a pretty strange restriction. Generally, if you are actually concerned about security at the SQL-command level, you're going to have to

[GENERAL] Postgres Security Checklist

2009-04-04 Thread Eduardo Henrique
Hi, I'm developing a Graduation Work about Database security. My idea is develop an application that connect in an database (in this case Postgres) and make some security verification of that db. The problem is that my verification only can be in a dabatase scope. I can't include Network and OS