Skip to content

VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000266-DB-000162

    <GroupDescription></GroupDescription>
    Group
  • VMware Postgres must provide nonprivileged users with minimal error information.

    &lt;VulnDiscussion&gt;Any database management system (DBMS) or associated application providing too much information in error messages on the scree...
    Rule Medium Severity
  • SRG-APP-000356-DB-000314

    <GroupDescription></GroupDescription>
    Group
  • VMware Postgres must have log collection enabled.

    &lt;VulnDiscussion&gt;Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and corre...
    Rule Medium Severity
  • SRG-APP-000359-DB-000319

    <GroupDescription></GroupDescription>
    Group
  • VMware Postgres must be configured to log to "stderr".

    &lt;VulnDiscussion&gt;Without the ability to centrally manage the content captured in the audit records, identification, troubleshooting, and corre...
    Rule Medium Severity
  • SRG-APP-000359-DB-000319

    <GroupDescription></GroupDescription>
    Group
  • "Rsyslog" must be configured to monitor VMware Postgres logs.

    &lt;VulnDiscussion&gt;For performance reasons, "rsyslog" file monitoring is preferred over configuring VMware Postgres to send events to a "syslog"...
    Rule Medium Severity
  • SRG-APP-000374-DB-000322

    <GroupDescription></GroupDescription>
    Group
  • VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.

    &lt;VulnDiscussion&gt;If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analys...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules