Security Basics mailing list archives

Re: security against dba´s


From: Nick Owen <nickowen () mindspring com>
Date: Wed, 11 Feb 2009 09:19:21 -0500

Andre Rodrigues wrote:
Hi,

How can I protect the database from the dba?

As far as I know they don´t need to access the database data in order to do their job.

Any related material appreciated.

This is a bit vague, but it seems to me that one tact might be to put
the authentication outside of the database and thus outside the control
of the DBA.  On linux this is doable via pam:
http://www.wikidsystems.com/support/wikid-support-center/how-to/how-to-secure-postgresql-using-two-factor-authentication-from-wikid

HTH.

nick

-- 
Nick Owen
WiKID Systems, Inc.
404-962-8983 (desk)
http://www.wikidsystems.com
Commercial/Open-source Two-Factor Authentication


Current thread: