Re: Spoofing as the postmaster

On Sat, 29 Dec 2007 10:38:13 -0500
Andrew Dunstan <andrew(at)dunslane(dot)net> wrote:
>
>
> D'Arcy J.M. Cain wrote:
> > - 1: How does the client assure that the postmaster is legit
> > - 2: How does the postmaster assure that the client is legit
>
> And neither answers the original problem:

Which seems to have been lost in the noise.

> 3. How can the sysadmin prevent a malicious local user from hijacking
> the sockets if the postmaster isn't running?

A better way of stating it for sure.

> Prevention is much more valuable than ex post detection, IMNSHO.
>
> Probably the first answer is not to run postgres on a machine with
> untrusted users, but that's not always possible. Maybe we can't find a
> simple cross-platform answer, but that doesn't mean we should not look
> at platform-specific answers, at least for documentation.

Yes, that's what I said at the start of this discussion. If you don't
trust the users with actual access to the box, the rest of this is
pretty much academic.

--
D'Arcy J.M. Cain <darcy(at)druid(dot)net> | Democracy is three wolves
http://www.druid.net/darcy/ | and a sheep voting on
+1 416 425 1212 (DoD#0082) (eNTP) | what's for dinner.