Home
Security Hardening
EDB PostgreSQL Advanced Server OS Linux V2R1

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-008400 – The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.
Details Allowing regular users to install software, without explicit privileges, creates the risk that untested or potentially malicious software will...
PPS9-00-003200 – Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server installation must be monitored to discover unauthorized changes.
Details If the system were to allow any user to make changes to software libraries, then those changes might be...
PPS9-00-008500 – The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).
Details Failure to provide logical access restrictions associated with changes to configuration may have significant effects on the overall security...
PPS9-00-003400 – Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.
Details When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components...
PPS9-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – Port
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. A database cluster listens...
PPS9-00-003600 – The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be restricted to authorized users – s used to modify database structure and logic modules must be restricted to authorized users.
Details If the DBMS were to allow any user to make changes to database structure or logic, then those changes...
PPS9-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL
Details Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats. A database cluster listens...
PPS9-00-003800 – Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
PPS9-00-003900 – Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
PPS9-00-009300 – The EDB Postgres Advanced Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.
Details DBMSs handling data requiring ‘data at rest’ protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of...

Prev Next

EDB PostgreSQL Advanced Server OS Linux V2R1

PPS9-00-008400 – The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

PPS9-00-003200 – Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server installation must be monitored to discover unauthorized changes.

PPS9-00-008500 – The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

PPS9-00-003400 – Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

PPS9-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – Port

PPS9-00-008700 – The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance – SSL

PPS9-00-003800 – Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

PPS9-00-003900 – Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

PPS9-00-009300 – The EDB Postgres Advanced Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.