OWASP Backend Security Project PostgreSQL Hardening - Revision history

Carlo.pelliccioni: /*
References
*/

2008-10-21T00:48:18Z

‎<br>References <br>

Carlo.pelliccioni: /* Overview */

2008-10-21T00:47:23Z

‎Overview

Carlo.pelliccioni: /* Limiting file access to filesystem and system routines
*/

2008-10-21T00:47:04Z

‎Limiting file access to filesystem and system routines<br>

Carlo.pelliccioni: /* Description */

2008-10-21T00:45:10Z

‎Description

Carlo.pelliccioni: /* Overview */

2008-10-21T00:44:03Z

‎Overview

Carlo.pelliccioni: /* Overview */

2008-10-21T00:43:43Z

‎Overview

Carlo.pelliccioni: /* Overview */

2008-10-21T00:41:57Z

‎Overview

Inode at 21:52, 8 August 2008

2008-08-08T21:52:54Z

Show changes

Carlo.pelliccioni: /* Tools */

2008-05-21T12:27:22Z

‎Tools

Carlo.pelliccioni: New page: = Overview = = Description = = References = = Tools =

2008-05-12T09:29:33Z

New page: = Overview = = Description = = References = = Tools =

New page

= Overview =

= Description =

= References =

= Tools =

@@ Line 209: / Line 209: @@
 By default PostrgreSQL deny to all users to access filesystem and system routines, only superuser are allowed to do that.
-= <br>References <br>  =
+= References =
 PostgreSQL documentation can be found at http://www.postgresql.org/docs/<br>

@@ Line 3: / Line 3: @@
 PostgreSQL is an object-relational database management system (ORDBMS). It is an enhancement of the original POSTGRES database management system, a next-generation DBMS research prototype. While PostgreSQL retains the powerful data model and rich data types of POSTGRES, it replaces the PostQuel query language with an extended subset of SQL. <br>
 This paragraph has the objectives to define the minimum security requirements for configuring and managing PostgreSQL.<br>
 = Description  =

@@ Line 209: / Line 209: @@
 == Limiting file access to filesystem and system routines<br>  ==
-By default PostrgreSQL deny to all users to access filesystem and system routines, only superuser are alowed to do that. So you have to check your user and never give superuser to customers&nbsp;;)
+By default PostrgreSQL deny to all users to access filesystem and system routines, only superuser are allowed to do that.
 = <br>References <br>  =
 PostgreSQL documentation can be found at http://www.postgresql.org/docs/<br>

@@ Line 16: / Line 16: @@
 *http://www.postgresql.org/docs/8.3/interactive/runtime-config-resource.html
 *http://www.postgresql.org/docs/8.3/interactive/preventing-server-spoofing.html
 You can monitor the PostgreSQL security alert there: http://www.postgresql.org/support/security.html<br>
@@ Line 25: / Line 23: @@
 pg_hba.conf is one of the main configuration file of PostgresSQL, it define the connection authorization. The file structure is:
 <pre>TYPE - DATABASE - USER - CIDR_ADDRESS - METHOD
 </pre>
 {| cellspacing="1" cellpadding="1" border="1"
@@ Line 80: / Line 77: @@
 |}
 You have to:
@@ Line 89: / Line 84: @@
 *'''Limit connections only from allowed IP'''
 *'''Use SSL connection'''<br>
 http://www.postgresql.org/docs/8.3/interactive/auth-pg-hba-conf.html
@@ Line 99: / Line 92: @@
 <pre>CREATE ROLE name [ [ WITH ] option [ ... ] ]
 </pre>
 {| width="100%" cellspacing="1" cellpadding="1" border="1" style=""
@@ Line 138: / Line 130: @@
 </pre>
 http://www.postgresql.org/docs/8.3/interactive/sql-createrole.html<br>
 === Access Privileges<br>  ===
@@ Line 146: / Line 136: @@
 <pre>GRANT { { SELECT | INSERT | UPDATE | DELETE | REFERENCES | TRIGGER } [,...] | ALL [ PRIVILEGES ] }  ON [ TABLE ] tablename [, ...] TO { [ GROUP ] rolename | PUBLIC } [, ...] [ WITH GRANT OPTION
 </pre>
 {| width="100%" cellspacing="1" cellpadding="1" border="1"
@@ Line 197: / Line 186: @@
 | Grant all of the available privileges at once. The PRIVILEGES key word is optional in PostgreSQL, though it is required by strict SQL. <br>
 |}
 http://www.postgresql.org/docs/8.3/interactive/sql-grant.html<br>
@@ Line 222: / Line 209: @@
 == Limiting file access to filesystem and system routines<br>  ==
 By default PostrgreSQL deny to all users to access filesystem and system routines, only superuser are alowed to do that. So you have to check your user and never give superuser to customers&nbsp;;)
 = <br>References <br>  =
 PostgreSQL documentation can be found at http://www.postgresql.org/docs/<br>

@@ Line 2: / Line 2: @@
 PostgreSQL is an object-relational database management system (ORDBMS). It is an enhancement of the original POSTGRES database management system, a next-generation DBMS research prototype. While PostgreSQL retains the powerful data model and rich data types of POSTGRES, it replaces the PostQuel query language with an extended subset of SQL. <br>
 This paragraph has the objectives to define the minimum security requirements for configuring and managing PostgreSQL.<br>
 '''This is an ALPHA version, so it's possible that some information are incomplete.'''

@@ Line 1: / Line 1: @@
 = Overview  =
-PostgreSQL is an object-relational database management system (ORDBMS). It is an enhancement of the original PostgreSQL database management system, a next-generation DBMS research prototype. While PostgreSQL retains the powerful data model and rich data types of PostgreSQL, it replaces the PostQuel query language with an extended subset of SQL. <br>
+PostgreSQL is an object-relational database management system (ORDBMS). It is an enhancement of the original POSTGRES database management system, a next-generation DBMS research prototype. While PostgreSQL retains the powerful data model and rich data types of POSTGRES, it replaces the PostQuel query language with an extended subset of SQL. <br>
 <br>

← Older revision		Revision as of 12:27, 21 May 2008
Line 4:		Line 4:

	= References =		= References =
−
−	~~= Tools =~~

OWASP Backend Security Project PostgreSQL Hardening - Revision history

Carlo.pelliccioni: /* References */

Carlo.pelliccioni: /* Overview */

Carlo.pelliccioni: /* Limiting file access to filesystem and system routines */

Carlo.pelliccioni: /* Description */

Carlo.pelliccioni: /* Overview */

Carlo.pelliccioni: /* Overview */

Carlo.pelliccioni: /* Overview */

Inode at 21:52, 8 August 2008

Carlo.pelliccioni: /* Tools */

Carlo.pelliccioni: New page: = Overview = = Description = = References = = Tools =

Carlo.pelliccioni: /*
References
*/

Carlo.pelliccioni: /* Limiting file access to filesystem and system routines
*/