From e6c78c670b8ef8cda7ff6ed610cee1ee633b487f Mon Sep 17 00:00:00 2001 From: Alain O'Dea Date: Wed, 25 Jan 2012 23:11:37 -0430 Subject: [PATCH] Enhance PostgreSQL security Provide more secure defaults for Host Based Access (pg_hba.conf). - Use ident in lieu of trust for shell access - Use md5 in lieu of trust for epgsql access --- zotonic_install | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/zotonic_install b/zotonic_install index 881dd68cec..f290781c4d 100644 --- a/zotonic_install +++ b/zotonic_install @@ -15,9 +15,9 @@ CREATE DATABASE zotonic WITH OWNER = zotonic ENCODING = 'UTF8'; \c zotonic CREATE LANGUAGE \"plpgsql\";" | su -l postgres -c psql && \ echo "# Zotonic settings -local all zotonic trust -host all zotonic 127.0.0.1/32 trust -host all zotonic ::1/128 trust" >> /etc/postgresql/8.4/main/pg_hba.conf && \ +local all zotonic ident +host all zotonic 127.0.0.1/32 md5 +host all zotonic ::1/128 md5" >> /etc/postgresql/8.4/main/pg_hba.conf && \ /etc/init.d/postgresql reload && \ mkdir /home/zotonic &&\