From 0ff6217227ce551d6c91524c8e7fd37352e20490 Mon Sep 17 00:00:00 2001 From: fusion32 Date: Sun, 19 Oct 2025 19:17:37 -0300 Subject: add include path for PostgreSQL + overall cleanup Some distributions place libpq headers under /usr/include/postgresql which is why it's added to the include path. And even though we don't support it yet, the same happens with MariaDB, with headers being placed under /usr/include/mariadb. --- postgres/README.txt | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'postgres') diff --git a/postgres/README.txt b/postgres/README.txt index a96995b..8042c81 100644 --- a/postgres/README.txt +++ b/postgres/README.txt @@ -93,9 +93,13 @@ psql -U postgres tibia 2 - Set default privileges. Newly created databases may have some default PUBLIC privileges that we'll want to revoke to make sure the set of users that are able to connect is tighly controlled. Then, for users that are able to connect, we -want to give default access privileges to tables. +want to grant default access privileges on tables, while revoking the ability to +create or rename objects (tables, views, sequences, indexes). Note that a schema +in PostgreSQL is just a namespace for objects and new databases should have the +*public* schema created by default. ``` REVOKE ALL ON DATABASE tibia FROM PUBLIC; +REVOKE CREATE ON SCHEMA public FROM PUBLIC; ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO PUBLIC; -- cgit v1.2.3