Re: Security Concerns over User 'postgres'

Поиск
Список
Период
Сортировка
Искать
От
Marcelo Costa
Тема
Re: Security Concerns over User 'postgres'
Дата
Msg-id
c13f2d590609221238g11b1d578n75f234c7fcfadbdd@mail.gmail.com
Ответ на
Список
Дерево обсуждения
Security Concerns over User 'postgres' "Lane Van Ingen" <lvaningen@esncc.com>
Re: Security Concerns over User 'postgres' Tom Lane <tgl@sss.pgh.pa.us>
Re: Security Concerns over User 'postgres' "Marcelo Costa" <marcelojscosta@gmail.com>
Re: Security Concerns over User 'postgres' "Lane Van Ingen" <lvaningen@esncc.com>
What Are Last Steps Performed When PostgreSQL Starts? "Lane Van Ingen" <lvaningen@esncc.com>
Re: What Are Last Steps Performed When PostgreSQL Starts? Ray Stell <stellr@cns.vt.edu>
Re: What Are Last Steps Performed When PostgreSQL Starts? Tom Lane <tgl@sss.pgh.pa.us>
Re: What Are Last Steps Performed When PostgreSQL Starts? "Lane Van Ingen" <lvaningen@esncc.com>
Re: What Are Last Steps Performed When PostgreSQL Bruce Momjian <bruce@momjian.us>
Re: What Are Last Steps Performed When PostgreSQL Brad Nicholson <bnichols@ca.afilias.info>
Hi,

Only create one user to your aplications and give to her rights to acess your database

You can change the password of postgresql user

In your linux distro type:

su - postgres

psql -U postgres

in the prompt of postgres type:

# alter user postgres with password 'your new password';

After this your password of user postgres are change.

Create an user to your aplications and give this to all users.

Don´t forget of rights (INSERT,SELECT,UPDATE,DELETE) on your tables to this user.

[],s

Marcelo Costa
DBA
Executive Secretary of Education from Pará/Amazônia/Brazil



2006/9/22, Tom Lane <tgl@sss.pgh.pa.us>:
"Lane Van Ingen" <lvaningen@esncc.com> writes:
> We created our PostgreSQL instance by compiling it from source, and the
> instance is working just fine. User postgres runs the service; we do not
> know what the password is, and we think it got created automatically by the
> compile / install process.

Are you sure it even *has* a password?  In the default RPM installation,
user postgres is created without any password --- the only way to become
postgres is to su there from root, and if you've got root you hardly
need to crack into postgres.

                        regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 3: Have you checked our extensive FAQ?

               http://www.postgresql.org/docs/faq



--
Marcelo Costa
В списке pgsql-admin по дате отправления
От: Tom Lane
Дата:
От: Lane Van Ingen
Дата:
FAQ