Trying to secure PostgreSQL

[Kirk Strauser]

At 2003-09-12T21:39:14Z, "Andrew L. Gould" <algould at datawok.com> writes:

> You're looking for something difficult when the easier answer is correct.
>
> As root, set pgsql's password by executing:
>
> passwd pgsql

What would that buy me?  After doing that, I can still access any database
on the system with:

    kirk at kanga:~$ psql -U pgsql template1
    Welcome to psql 7.3.4, the PostgreSQL interactive terminal.

without being prompted for a password.  I don't want users, even local
users, to have full run of the database as the user of their choice.
-- 
Kirk Strauser
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030912/1cd25cc1/attachment.bin