Home
Security Hardening
DISA STIG PostgreSQL 9.x On RHEL OS V2R2

DISA STIG PostgreSQL 9.x On RHEL OS V2R2

PGS9-00-001400 – PostgreSQL must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).
Details Non-organizational users include all information system users other than organizational users, which includes organizational employees or individuals the organization...
PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log directory
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-001700 – PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in storage.
Details Without the association of security labels to information, there is no basis for PostgreSQL to make security-related access-control decisions....
PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log_file_mode
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-002100 – PostgreSQL must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.
Details In order to ensure sufficient storage capacity for the audit logs, PostgreSQL must be able to allocate audit record...
PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log files
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-002200 – PostgreSQL must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects – df+
Details Discretionary Access Control (DAC) is based on the notion that individual users are ‘owners’ of objects and therefore have...
PGS9-00-000500 – PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.
Details Enterprise environments make account management for applications and databases challenging and complex. A manual process for account management functions...
PGS9-00-000700 – Privileges to change PostgreSQL software modules must be limited – binary objects
Details If the system were to allow any user to make changes to software libraries, those changes might be implemented...
PGS9-00-000700 – Privileges to change PostgreSQL software modules must be limited – data
Details If the system were to allow any user to make changes to software libraries, those changes might be implemented...

DISA STIG PostgreSQL 9.x On RHEL OS V2R2

PGS9-00-001400 – PostgreSQL must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log directory

PGS9-00-001700 – PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in storage.

PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log_file_mode

PGS9-00-002100 – PostgreSQL must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

PGS9-00-000400 – The audit information produced by PostgreSQL must be protected from unauthorized modification – log files

PGS9-00-002200 – PostgreSQL must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects – df+

PGS9-00-000500 – PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

PGS9-00-000700 – Privileges to change PostgreSQL software modules must be limited – binary objects

PGS9-00-000700 – Privileges to change PostgreSQL software modules must be limited – data