Re: Using a database as backend for Nessus (current state and volunteering for development)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>
>
>>There's also the minor issue of permissions - e.g. with
>>postgres, afaik, one cannot be root and access the db
>>(or at least its HIGHLY discouraged). Since Nessus needs
>>to run as root, you have a minor problem now that you need
>>to solve if the server is the one accessing the DB. From
>>that perspective, it may be worthwhile to completely
>>separate out the DB management actions from the Nessus
>>daemon.
>>
>>Cheers, Thomas
>>    
>>

Eh.  Not so :)

You can acces the database as any user at all.  UNIX user does not equal 
postgres user.  The highly discouraged "root" user is the use of the 
postgres user to addess databases since the postgres user (is the 
default owner of/has access to) everything from files on disks to data 
within the DB.  The use of this user (postgres user) is highly discouraged.

root# psql -U some_postgres_username <some command>

Root can connect to postgres all you like.  Simply specify the postgres 
username to do operations as.  This is what is important.

David

- -- 
I may have the information you need and I may choose only HTML.  It's up to you. Disclaimer: I am not responsible for any email that you send me nor am I bound to any obligation to deal with any received email in any given fashion.  If you send me spam or a virus, I may in whole or part send you 50,000 return copies of it. I may also publically announce any and all emails and post them to message boards, news sites, and even parody sites.  I may also mark them up, cut and paste, print, and staple them to telephone poles for the enjoyment of people without internet access.  This is not a confidential medium and your assumption that your email can or will be handled confidentially is akin to baring your backside, burying your head in the ground, and thinking nobody can see you butt nekkid and in plain view for miles away.  Don't be a cluebert, buy one from K-mart today.

When it absolutely, positively, has to be destroyed overnight.
                           AIR FORCE

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+JOVU74cGT/9uvgsRAlusAJsEcrF/441DpVmIPwm2/o0+8C/LDgCgzs1+
oYYBfsGGDD1Zw8L7ZAnL59c=
=OBcu
-----END PGP SIGNATURE-----