Re: Protecting stored procedures

From: John R Pierce <pierce(at)hogranch(dot)com>
To: pgsql-general(at)postgresql(dot)org
Subject: Re: Protecting stored procedures
Date: 2011-04-07 16:13:02
Message-ID: 4D9DE28E.2060908@hogranch.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 04/07/11 7:31 AM, Michael Gould wrote:
> We wouldn't make any of the system users a superuser in Postgres

are you providing software run on a customers box, or a turnkey managed
system (hardware+software) ?

anyone who has root access can easily gain database access. anyone with
physical access to the box and its console can gain root access.
anyone with access to pg_dumpall backup files has access to your stored
procedures, too.

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Andrew Sullivan 2011-04-07 16:45:05 Re: Protecting stored procedures
Previous Message Tom Lane 2011-04-07 14:45:39 Re: postgres segfaulting on pg_restore