Postgres usage?

7 posts / 0 new
Last post
#1 Tue, 07/10/2007 - 15:53
MarkCumberland

Postgres usage?

I am curious which, if any, functions use the PostgreSQL server. I am getting a lot of attempted hacks on the postgres user; my websites all use MySQL. Is there some Virtualmin function that requires PostgreSQL?

Tue, 07/10/2007 - 22:18
mike

from my experience of playing around with webmin and virtualmin i have found that having postgre running or not running seems to make no difference to virtualmin and webmin, the postgre module that is built into webmin is for the instance that you decide to use postgre, if you do not have postgre installed it is safe to remove the module, also if you dont have any users using postgre then it is safe to remove entirely.

Wed, 07/11/2007 - 02:42 (Reply to #2)
Joe
Joe's picture

As Mike noted, Virtualmin and Webmin do not need PostgreSQL for anything.

There are several scripts that can use it, and it is a great database...but the majority of scripts are more comfortable, reliable, and better tested on MySQL, so it's probably wise to stick with it.

I will point out that you're probably not seeing attempted hacks...you're probably seeing the status checks that Webmin does when building the System Information page. PostgreSQL shouldn't be listening on any public ports, by default, and so it shouldn't be hackable from outside of your system (even if an exploit were discovered). If you're seeing a su to postgres every 10 minutes, it's just Webmin, and can be safely ignored.

But, no harm in disabling it if you don't need it and your users don't need it. In fact, it'll free up some memory.

--

Check out the forum guidelines!

Fri, 07/03/2009 - 04:40 (Reply to #3)
jahlewis

Is there any way to disable these status checks if the postgres module is disabled?

Fri, 07/03/2009 - 09:04 (Reply to #4)
andreychek

In theory, the status checks wouldn't attempt to check Postgres if it's disabled.

Are you saying that although you disabled Postgres, you still get status notifications that it's down?

-Eric

Sun, 07/05/2009 - 18:12 (Reply to #5)
jahlewis

Yes. Under Virtualmin -> System Settings -> Features and Plugins, PostgreSQL database is unchecked. This is where I disable it, right? Anyplace else i should look?

here is what I'm seeing in my logs:

Jul 5 18:35:03 kermit su: pam_unix(su:session): session opened for user postgres by (uid=0) Jul 5 18:35:03 kermit su: pam_unix(su:session): session closed for user postgres Jul 5 18:40:02 kermit su: pam_unix(su:session): session opened for user postgres by (uid=0) Jul 5 18:40:02 kermit su: pam_unix(su:session): session closed for user postgres Jul 5 18:45:02 kermit su: pam_unix(su:session): session opened for user postgres by (uid=0) Jul 5 18:45:02 kermit su: pam_unix(su:session): session closed for user postgres Jul 5 18:50:02 kermit su: pam_unix(su:session): session opened for user postgres by (uid=0) Jul 5 18:50:02 kermit su: pam_unix(su:session): session closed for user postgres Jul 5 18:55:03 kermit su: pam_unix(su:session): session opened for user postgres by (uid=0) Jul 5 18:55:03 kermit su: pam_unix(su:session): session closed for user postgres

Sun, 07/15/2007 - 18:06
MarkCumberland

Thanks for the information; I have disabled PostgreSQL, and for one week, no failures! And you are correct, that little bit of extra memory and the fact that it is one less service to hack is good.

Topic locked