Featured post
postgresql - Postgres Encryption of configuration files -
currently in postgres largest security hole .conf files database relies on, because access system (not database) can modify files , gain entry. because of seeking out resources on how encrypt .conf files , decrypt them during each session of database. performance not issue @ point. have resources on or has developed prototypes utilize functionality?
edit
since there seems confusion here asking. scenario can best illustrated on windows box following groups:
1) administrators system administrators
2) database administrators postgres administrators
3) auditors security auditors
the auditors group typically needs access log files , configuration files ensure system security. however, issue comes when member of auditors
group needs view postgres configuration , log files. if member decides want access database though do not
have database account short task break in
. how 1 go preventing this? answers such as: get better auditors
quite poor can never predict people do.
you fine. no need encrypt, long have permissions on *.conf files correct.
your postgresql.conf , pg_hba.conf should both marked readable postgres user/group. if don't have actual users permissions, root can see them.
- Get link
- X
- Other Apps
Comments
Post a Comment