PostgreSQL security

Lists: pgsql-admin
From: Jason Dixon <jason(at)dixongroup(dot)net>
To: pgsql-admin(at)postgresql(dot)org
Subject: PostgreSQL security
Date: 2005-03-05 01:11:13
Message-ID: a26b29c6b638a804f2f593588ed31027@dixongroup.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-admin

Hi folks-

I have a short presentation to give tomorrow at a local security
conference. I've chosen to give a lightning talk on tips for
tightening down your PostgreSQL installation. I've got a short list
together, but I was hoping to get more. The manual touches on some of
the obvious aspects of authentication and access, not much more.

Any bits of insight that the PostgreSQL community might have to offer?

Thanks,

--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net


From: Bruno Wolff III <bruno(at)wolff(dot)to>
To: Jason Dixon <jason(at)dixongroup(dot)net>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: PostgreSQL security
Date: 2005-03-05 06:52:29
Message-ID: 20050305065229.GB18621@wolff.to
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-admin

On Fri, Mar 04, 2005 at 20:11:13 -0500,
Jason Dixon <jason(at)dixongroup(dot)net> wrote:
> Hi folks-
>
> I have a short presentation to give tomorrow at a local security
> conference. I've chosen to give a lightning talk on tips for
> tightening down your PostgreSQL installation. I've got a short list
> together, but I was hoping to get more. The manual touches on some of
> the obvious aspects of authentication and access, not much more.
>
> Any bits of insight that the PostgreSQL community might have to offer?

Explain how to use ident authentication for local connections.