Postgresql – Are there any Database functions which allow access to other network services in PostgreSQL

postgresqlSecurity

I have set up a new postgres installation and have to meet the security requirements from my company.

There is one requirement were i'm not quite sure:

Database functions which allow access to other network services (e.g. ,SMTP, HTTP, SNMP, FTP etc.), must be deleted or deactivated.

Motivation: Some database systems provide functions that are normally offered by an application server. For instance it is possible via special stored procedures to send e-mails or launch web queries to external systems.

I have installed postgres (PostgreSQL) 9.3.4. Are there any functions like this in a standard installation on Red Hat Enterprise Linux Server release 6.5 (Santiago)?

Best Answer

I have never seen that personally, so I looked up all the functions in Postgres found in the docs here.

The only thing it showed remotely close was 'network address functions' in this section. Outside of that the docs don't show anything for network access functions. Note this doesn't mean you can't write your own functions that access the system or OS which then can access the network.

Related Solutions

Postgresql – Are there any professional fulltime PostgreSQL DBA’s

Judging from the activity on the PostgreSQL jobs mailing list I'd say it's not all that uncommon to find full-time PostgreSQL DBAs.

http://www.google.com/search?q=full+time+site:postgresql.org/pgsql-jobs

Sql-server – Create database role to allow read access to all tables; write access to some

Granting permissions on the schema (e.g. dbo) will cascade to all the objects in that schema. For individual exceptions you can just list those explicitly:

GRANT SELECT ON SCHEMA::dbo TO [role];
GO

GRANT INSERT, UPDATE --, DELETE
  ON dbo.table_they_can_write_to TO [role];

DENY SELECT ON dbo.table_they_cannot_read TO [role];

Best Answer

Related Solutions

Postgresql – Are there any professional fulltime PostgreSQL DBA’s

Sql-server – Create database role to allow read access to all tables; write access to some

Related Question