Re: .pgpass and root: a problem

On 2013-02-05, Scott Mead <scottm(at)openscg(dot)com> wrote:

> I would love to see pgpass storing encrypted stuff here, that'd be great...
> in the meantime...

whatever it stores will, of necessity, be sufficient to grant access to the
postgres database, libpq could be modified to use MD5 hashed passwords
in that file salted with the username. But that won't make the databse
any more secure.

> Is there any way that you could move your 'root-fellas' to a 'sudo' model
> so that they can have *most* of what they need, without allowing identity
> switches ? I was trying to come up with something clever, but if they're
> root, they're root.

--
⚂⚃ 100% natural