Re: How to give security to pg_catalogs

From: raghavendra t <raagavendra(dot)rao(at)gmail(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: How to give security to pg_catalogs
Date: 2010-03-29 17:52:55
Message-ID: bc7de5a31003291052l4a3aa81ek3e0b90942f150b1@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi Tom,

Thank you for the update

> This is much like the fact that, say, root can trivially destroy any
> Unix filesystem. You could imagine trying to put enough training wheels
> on superuserdom to prevent such things, but it's not really practical
> and any attempt would get in the way of many legitimate uses.

Can we create any prompts on the pg_catalogs while doing any operation like
altering/deleting manually.

Regards
Raghavendra

On Mon, Mar 29, 2010 at 8:22 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:

> raghavendra t <raagavendra(dot)rao(at)gmail(dot)com> writes:
> > How to give security to the pg_catalogs, as these are freely alterable
> and
> > cause some security problem. Here i mean to say, as a superuser we can
> > delete the rows from a catalogs are alter the catalogs, is there anyway
> to
> > put restriction or any promting before doing anything to catalogs.
> > Any suggestions for this ?
>
> Don't give superuser privileges to anyone who's dumb enough to try such
> things on a production database.
>
> This is much like the fact that, say, root can trivially destroy any
> Unix filesystem. You could imagine trying to put enough training wheels
> on superuserdom to prevent such things, but it's not really practical
> and any attempt would get in the way of many legitimate uses.
>
> regards, tom lane
>

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Mark Vantzelfde 2010-03-29 17:54:50 Re: PostgreSQL on Windows
Previous Message Raymond O'Donnell 2010-03-29 17:51:25 Re: PostgreSQL on Windows