Search Postgresql Archives

Re: Securing Postgres

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



L van der Walt <mailing@xxxxxxxxxx> writes:
> The big problem is that the administrators works for the client and not 
> for me.  I don't want the client to reverse engineer my database. 
> There might be other applications on the server so the administrators do 
> require root access.
> About the raw database files,  I can use encryption to protect the data.

If you think encryption will protect you against someone with root
privileges, you're sadly mistaken.  They could, for example, attach
to your process with a debugger and examine the decrypted data appearing
within its memory space.  Or just capture the decryption key that way,
and then study the files at their leisure.

All the same points hold for SQL Server of course --- the fact that you
weren't aware of these risks doesn't mean they don't exist.

			regards, tom lane

---------------------------(end of broadcast)---------------------------
TIP 2: Don't 'kill -9' the postmaster

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Postgresql Jobs]     [Postgresql Admin]     [Postgresql Performance]     [Linux Clusters]     [PHP Home]     [PHP on Windows]     [Kernel Newbies]     [PHP Classes]     [PHP Books]     [PHP Databases]     [Postgresql & PHP]     [Yosemite]
  Powered by Linux