Effectively securing your PostgreSQL database

Malcolm McLean

PostgresConf South Africa 2019

https://postgresconf.org/conferences/...

Securing access to your database and data seems obvious, but are you doing enough? The default settings within PostgreSQL and even the default firewall configuration on stock Linux installs are a far cry from being secure.

Even if you're not handling or storing credit card information, PCI-DSS defines many things to do in order to secure access to a database and operating system, which can be applied by just about everyone to varying levels of paranoia.

We will cover the various ways to secure your database and operating system, how to restrict access at a data level and how PostgreSQL handles users, rights and permissions.