| From: | Geoffrey <esoteric(at)3times25(dot)net> | 
|---|---|
| To: | pgsql general <pgsql-general(at)postgresql(dot)org> | 
| Subject: | Re: How to have a blind-superuser | 
| Date: | 2006-04-25 12:08:53 | 
| Message-ID: | 444E1155.4000400@3times25.net | 
| Views: | Whole Thread | Raw Message | Download mbox | Resend email | 
| Thread: | |
| Lists: | pgsql-general | 
Steve Atkins wrote:
> So... you're not going to be able to do this _at_all_ from within
> the database. You're going to need an external solution, probably
> a hideous seteuid thing, if you really want to do this. And it's
> a really bad idea, so you probably don't want to.
Thinking out loud on this one, so feel free to shoot it full of holes 
folks.  I'm also assuming a UNIX based system.  I don't suggest this 
solution, but it might be closer to what you're looking for.
Create a root permission id that has the permissions to backup the 
database. Set the id's shell in /etc/passwd so that it executes a script 
that performs the backup.  Again, I don't recommend this, but it might 
be a workable solution.  Now, you login to the machine and the script is 
executed.
Personally, I still maintain that if you can't trust the person that is 
expected to backup your database, you should get rid of them.
-- 
Until later, Geoffrey
Any society that would give up a little liberty to gain a little
security will deserve neither and lose both.  - Benjamin Franklin
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Geoffrey | 2006-04-25 12:14:15 | Re: pg_dumpall: does not exist database | 
| Previous Message | Geoffrey | 2006-04-25 11:56:17 | Re: How to have a blind-superuser |