Ensure sudo is configured correctly – /etc/sudoers.d/postgres
Details It is common to have more than one authorized individual administering the PostgreSQL service at the Operating System level....
- Home
- Security Hardening
- CIS PostgreSQL 12 OS V1.0.0
CIS PostgreSQL 12 OS V1.0.0
Ensure systemd Service Files Are Enabled
Details Confirm, and correct if necessary, the PostgreSQL systemd service is enabled. Rationale: Enabling the systemd service on the OS...Ensure the backup and restore tool, ‘pgBackRest’, is installed and configured
Details pgBackRest aims to be a simple, reliable backup and restore system that can seamlessly scale up to the largest...Ensure the file permissions mask is correct
Details Files are always created using a default set of permissions. File permissions can be restricted by applying a permissions...Ensure the PostgreSQL pg_wheel group membership is correct
Details The group pg_wheel is explicitly created on a host where the PostgreSQL server is installed. Membership in this group...Ensure WAL archiving is configured and functional – archive_command
Details Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY...Ensure WAL archiving is configured and functional – archive_mode
Details Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY...Ensure WAL archiving is configured and functional – /var/lib/pgsql/WAL
Details Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY...