3. Don't let your DB engine execute random executable like wget/dd (Apparmor/SEL... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

sdeziel on March 19, 2018 | parent | context | favorite | on: A picture got my PostgreSQL database to start mini...

3. Don't let your DB engine execute random executable like wget/dd (Apparmor/SELinux)

4. Don't let your DB host make outbound connections (iptables/ip6tables)

emmelaich on March 19, 2018 [–]

> Don't let your DB host make outbound connections

Which can also be prevented with SELinux

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact