| From: | Stephen Frost <sfrost(at)snowman(dot)net> |
|---|---|
| To: | Chris Withers <chris(at)simplistix(dot)co(dot)uk> |
| Cc: | pgsql-general(at)postgresql(dot)org |
| Subject: | Re: "trust" authentication in pg_hba.conf |
| Date: | 2015-11-25 13:42:35 |
| Message-ID: | 20151125134234.GW3685@tamriel.snowman.net |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
* Chris Withers (chris(at)simplistix(dot)co(dot)uk) wrote:
> What's the default contents of pg_hba.conf that postgres ships with?
The PG community provides both source code, which is expected to be used
by developers and is therefore wide open, and binary packages, which are
expected to be used by end users and therefore has sensible defaults for
authentication (mainly 'peer').
> I've been to it contains 'trust' for all local connections.
> Is this wise? Anyone who can get a shell on your database server can
> connect to any database as any user?
It is not wise to run with 'trust' in a non-development environment.
Thanks!
Stephen
| From | Date | Subject | |
|---|---|---|---|
| Next Message | NTPT | 2015-11-25 13:56:29 | RE: [GENERAL] Query failed: ERROR: character with byte sequence 0xc2 0x96 in encoding "UTF8" has no equivalent in encoding "WIN1250" |
| Previous Message | Stephen Frost | 2015-11-25 13:40:25 | Re: Can row level security policies also be implemented for views? |