Home
Security Hardening
EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-003800 – Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
EP11-00-000700 – The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.
Details Enterprise environments make account management for applications and databases challenging and complex. A manual process for account management functions...
EP11-00-003900 – Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – data*
Details Without the capability to restrict the types of roles and individuals that can select which events are audited, unauthorized...
EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – data dir
Details Without the capability to restrict the types of roles and individuals that can select which events are audited, unauthorized...
EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – postgresql.conf
Details Without the capability to restrict the types of roles and individuals that can select which events are audited, unauthorized...
EP11-00-002300 – The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.
Details It is critical that when the DBMS is at risk of failing to process audit logs as required, action...
EP11-00-002400 – The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out – FIFO), in the event of unavailability of space for more audit log records.
Details It is critical that when the DBMS is at risk of failing to process audit logs as required, action...
EP11-00-002600 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...
EP11-00-002700 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.
Details If audit data were to become compromised, then competent forensic analysis and discovery of the true source of potentially...

EDB PostgreSQL Advanced Server V11 Windows OS V2R1

EP11-00-003800 – Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

EP11-00-000700 – The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

EP11-00-003900 – Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – data*

EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – data dir

EP11-00-001100 – The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited – postgresql.conf

EP11-00-002300 – The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

EP11-00-002400 – The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out – FIFO), in the event of unavailability of space for more audit log records.

EP11-00-002600 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

EP11-00-002700 – The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.