Search Postgresql Archives

Re: security documentation

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2005-09-30 at 09:14, jeff sacksteder wrote:
> Are there any data access issues (as opposed to data visibility
> issues)
>         you are having?
>         
> 
> No, It's just that in a hosting situation where each customer has a
> database of their own, they need to be boxed in somehow. In the event
> of an application bug allowing raw sql to be executed, it's not
> appropriate for them to be able to learn what other databases and
> users exist.

Well, the fact that they're still on the same database cluster is the
real issue then.  If you need true isolation, then each one needs their
own (possibly virtual) server.

No matter how much you might be able to hide the other databases,
they're still there, and issuing an unconstrained join can still pretty
much kill everyone else's performance.

---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux