Home
Security Hardening
EDB PostgreSQL Advanced Server OS Linux V2R1

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-004200 – The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).
Details To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and...
PPS9-00-004400 – If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.
Details The DoD standard for authentication is DoD-approved PKI certificates. Authentication based on User ID and Password may be used...
PPS9-00-004500 – The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.
Details The DoD standard for authentication is DoD-approved PKI certificates. A certificate’s certification path is the path from the end...
PPS9-00-004600 – The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.
Details The DoD standard for authentication is DoD-approved PKI certificates. PKI certificate-based authentication is performed by requiring the certificate holder...
PPS9-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations – openssl
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
PPS9-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations – RHEL
Details Use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect...
PPS9-00-005700 – The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.
Details This control is intended to address the confidentiality and integrity of information at rest in non-mobile devices and covers...
PPS9-00-006100 – Access to database files must be limited to relevant processes and to authorized, administrative users.
Details Applications, including DBMSs, must prevent unauthorized and unintended information transfer via shared system resources. Permitting only DBMS processes and...
PPS9-00-008000 – The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.
Details Organizations are required to use a central log management system, so under normal conditions, the audit space allocated to...
PPS9-00-003100 – The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...

Prev Next

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-004200 – The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

PPS9-00-004400 – If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

PPS9-00-004500 – The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

PPS9-00-004600 – The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

PPS9-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations – openssl

PPS9-00-004900 – The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations – RHEL

PPS9-00-005700 – The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

PPS9-00-006100 – Access to database files must be limited to relevant processes and to authorized, administrative users.

PPS9-00-008000 – The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

PPS9-00-003100 – The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.