On Tue, Jan 14, 2014 at 11:35 AM, Korry Douglas <korry.douglas@xxxxxxxxxxxxxxxx> wrote:
ALTER SYSTEM is for setting (some — specifically, runtime configurable) postgresql.conf directives, not pg_hba.conf rules. See <http://www.postgresql.org/docs/devel/static/sql-altersystem.html>
pgadmin could use the new ALTER SYSTEM command (coming in 9.4)
Assume for a moment that you could change hba rules with ALTER SYSTEM: what happens if a malicious user were to add a "host all all 0.0.0.0/0 reject" rule? Or, perhaps worse, "host all postgres 0.0.0.0/0 trust"?
rls
--
:wq
:wq
