> Since what he is worried about is the ability of admins to get at the > data by connecting to the postgres server (after changing pg_hba.conf), > this will not make the slightest difference - the data would be > decrypted before it ever got to the intruder.
I was suggesting that pg_hba.conf could be stored in the same encrypting filesystem. -- Korry ---------------------------(end of broadcast)--------------------------- TIP 5: don't forget to increase your free space map settings