Home
Security Hardening
DISA STIG VMware vSphere 6.7 PostgreSQL V1R1

DISA STIG VMware vSphere 6.7 PostgreSQL V1R1

VCPG-67-000017 – VMware Postgres must not allow schema access to unauthorized accounts.
Details Database management systems typically separate security functionality from non-security functionality via separate databases or schemas. Database objects or code...
VCPG-67-000001 – VMware Postgres must limit the number of connections.
Details Database management includes the ability to control the number of users and user sessions utilizing a DBMS. Unlimited concurrent...
VCPG-67-000019 – VMware Postgres must provide non-privileged users with minimal error information.
Details Any DBMS or associated application providing too much information in error messages on the screen or printout risks compromising...
VCPG-67-000002 – VMware Postgres log files must contain required fields.
Details Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating...
VCPG-67-000020 – VMware Postgres must have log collection enabled.
Details Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and correlation of suspicious...
VCPG-67-000003 – VMware Postgres configuration files must not be accessible by unauthorized users.
Details VMware Postgres has several configuration files that directly control the security posture of the DBMS. Protecting these files from...
VCPG-67-000021 – VMware Postgres must be configured to log to stderr.
Details Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and correlation of suspicious...
VCPG-67-000004 – VMware Postgres must be configured to overwrite older logs when necessary.
Details Without proper configuration, log files for VMware Postgres can grow without bound, filling the partition and potentially affecting the...
VCPG-67-000022 – Rsyslog must be configured to monitor VMware Postgres logs – first
Details For performance reasons, rsyslog file monitoring is preferred over configuring VMware Postgres to send events to a syslog facility....
VCPG-67-000005 – VMware Postgres database must protect log files from unauthorized access and modification.
Details If audit data were to become compromised, competent forensic analysis and discovery of the true source of potentially malicious...

DISA STIG VMware vSphere 6.7 PostgreSQL V1R1

VCPG-67-000017 – VMware Postgres must not allow schema access to unauthorized accounts.

VCPG-67-000001 – VMware Postgres must limit the number of connections.

VCPG-67-000019 – VMware Postgres must provide non-privileged users with minimal error information.

VCPG-67-000002 – VMware Postgres log files must contain required fields.

VCPG-67-000020 – VMware Postgres must have log collection enabled.

VCPG-67-000003 – VMware Postgres configuration files must not be accessible by unauthorized users.

VCPG-67-000021 – VMware Postgres must be configured to log to stderr.

VCPG-67-000004 – VMware Postgres must be configured to overwrite older logs when necessary.

VCPG-67-000022 – Rsyslog must be configured to monitor VMware Postgres logs – first

VCPG-67-000005 – VMware Postgres database must protect log files from unauthorized access and modification.