Re: Post Install / Secure PostgreSQL

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Carlos Mennens <carlos(dot)mennens(at)gmail(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: Post Install / Secure PostgreSQL
Date: 2010-09-10 15:51:44
Message-ID: 25125.1284133904@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Carlos Mennens <carlos(dot)mennens(at)gmail(dot)com> writes:
> I am brand new to PostgreSQL and coming from MySQL. My question is
> does anyone know after I install PostgreSQL on my Linux server, is
> there a script that secures the database like MySQL offers in most
> Linux distributions? I think the script for MySQL is
> "/usr/bin/mysql_secure_installation". I checked and there doesn't
> appear to be on located there specifically for PostgreSQL. This script
> is nice because it lets people who are new to databases set root
> password, disable anonymous accounts, remove anonymous accounts,
> remove test databases, disable remote root logins to databases.

The reason mysql has such a script is that their installations are
insecure by default. Postgres installations aren't, unless you
tell initdb to use "trust" mode, which isn't usual in prepackaged
distributions.

regards, tom lane

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Carlos Mennens 2010-09-10 15:53:12 Re: Post Install / Secure PostgreSQL
Previous Message Ketema Harris 2010-09-10 15:43:36 Re: Good candidate query for window syntax?