Home
Security Hardening
DISA STIG PostgreSQL 9.x On RHEL OS V2R2

DISA STIG PostgreSQL 9.x On RHEL OS V2R2

PGS9-00-004000 – PostgreSQL must isolate security functions from non-security functions – df+ information_schema
Details An isolation boundary provides access control and protects the integrity of the hardware, software, and firmware that perform security...
PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log directory
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log_file_mode
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log files
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PGS9-00-002500 – PostgreSQL must reveal detailed error messages only to the ISSO, ISSM, SA and DBA.
Details If PostgreSQL provides too much information in error logs and administrative messages to the screen, this could lead to...
PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Config
Details Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be...
PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Data
Details Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be...
PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Roles
Details Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be...
PGS9-00-003000 – PostgreSQL must maintain the confidentiality and integrity of information during reception.
Details Information can be either unintentionally or maliciously disclosed or modified during reception, including, for example, during aggregation, at protocol...
PGS9-00-004000 – PostgreSQL must isolate security functions from non-security functions – df+ pg_catalog
Details An isolation boundary provides access control and protects the integrity of the hardware, software, and firmware that perform security...

Prev Next

DISA STIG PostgreSQL 9.x On RHEL OS V2R2

PGS9-00-004000 – PostgreSQL must isolate security functions from non-security functions – df+ information_schema

PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log directory

PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log_file_mode

PGS9-00-002300 – The audit information produced by PostgreSQL must be protected from unauthorized deletion – log files

PGS9-00-002500 – PostgreSQL must reveal detailed error messages only to the ISSO, ISSM, SA and DBA.

PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Config

PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Data

PGS9-00-002600 – PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – Roles

PGS9-00-003000 – PostgreSQL must maintain the confidentiality and integrity of information during reception.

PGS9-00-004000 – PostgreSQL must isolate security functions from non-security functions – df+ pg_catalog