On Wed, Mar 30, 2005 at 11:14:38AM -0500, John DeSoi wrote: > On Mar 30, 2005, at 10:17 AM, Zouari Fourat wrote: > > >is it really secure in a shared hosting environnement case ? > >do you advise me to offer pgsql in a shared hosting ? > > You can do all of the necessary things to control access to the > databases.
...like using pg_hba.conf to control who's allowed to connect to each database. If you don't want people to query the system catalogs for a particular database, then don't allow them to connect to that database (there are a few shared catalogs that anybody can query, however). The db_user_namespace configuration variable might help with managing access, but the documentation says that it's "intended as a temporary measure until a complete solution is found," so caveat administrator. -- Michael Fuhr http://www.fuhr.org/~mfuhr/ ---------------------------(end of broadcast)--------------------------- TIP 4: Don't 'kill -9' the postmaster
