Ensure systemd Service Files Are Enabled
Details Confirm, and correct if necessary, the PostgreSQL systemd service is enabled. Rationale: Enabling the systemd service on the OS...
- Home
- Security Hardening
- CIS PostgreSQL 11 OS V1.0.0
CIS PostgreSQL 11 OS V1.0.0
Ensure the backup and restore tool, ‘pgBackRest’, is installed and configured
Details pgBackRest aims to be a simple, reliable backup and restore system that can seamlessly scale up to the largest...Ensure the file permissions mask is correct
Details Files are always created using a default set of permissions. File permissions can be restricted by applying a permissions...Ensure the PostgreSQL pg_wheel group membership is correct – /etc/group
Details The group pg_wheel is explicitly created on a host where the PostgreSQL server is installed. Membership in this group...Ensure the PostgreSQL pg_wheel group membership is correct – /etc/passwd
Details The group pg_wheel is explicitly created on a host where the PostgreSQL server is installed. Membership in this group...Ensure WAL archiving is configured and functional – archive_command
Details Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY...Ensure WAL archiving is configured and functional – archive_mode
Details Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY...