Home
Security Hardening
EDB PostgreSQL Advanced Server OS Linux V2R1

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-000700 – The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.
Details Enterprise environments make account management for applications and databases challenging and complex. A manual process for account management functions...
PPS9-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.
Details Without the capability to restrict which roles and individuals can select which events are audited, unauthorized personnel may be...
PPS9-00-002300 – The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.
Details It is critical that when the DBMS is at risk of failing to process audit logs as required, it...
PPS9-00-002400 – The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out – FIFO), in the event of unavailability of space for more audit log records.
Details It is critical that when the DBMS is at risk of failing to process audit logs as required, it...
PPS9-00-002600 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PPS9-00-002700 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PPS9-00-002800 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
PPS9-00-002900 – The EDB Postgres Advanced Server must protect its audit features from unauthorized access.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Depending upon...
PPS9-00-003000 – The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
PPS9-00-004000 – Access to external executables must be disabled or restricted.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-000700 – The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

PPS9-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

PPS9-00-002300 – The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

PPS9-00-002400 – The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out – FIFO), in the event of unavailability of space for more audit log records.

PPS9-00-002600 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

PPS9-00-002700 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.

PPS9-00-002800 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.

PPS9-00-002900 – The EDB Postgres Advanced Server must protect its audit features from unauthorized access.

PPS9-00-003000 – The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.

PPS9-00-004000 – Access to external executables must be disabled or restricted.