Skip to content
ATO Pathways
  Log In

Crunchy Data Postgres 16 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000091-DB-000325

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

    &lt;VulnDiscussion&gt;Under some circumstances, it may be useful to monitor who/what is reading privilege/permission/role information. Therefore, i...
    Rule Medium Severity
    Show

  • SRG-APP-000092-DB-000208

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing sufficient information to establish what type of events occurred.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without establishing what type of event oc...
    Rule Medium Severity
    Show

  • SRG-APP-000096-DB-000040

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing time stamps to establish when the events occurred.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without establishing when events occurred,...
    Rule Medium Severity
    Show

  • SRG-APP-000097-DB-000041

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing sufficient information to establish where the events occurred.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without establishing where events occurred...
    Rule Medium Severity
    Show

  • SRG-APP-000098-DB-000042

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing sufficient information to establish the sources (origins) of the events.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without establishing the source of the eve...
    Rule Medium Severity
    Show

  • SRG-APP-000099-DB-000043

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without information about the outcome of e...
    Rule Medium Severity
    Show

  • SRG-APP-000100-DB-000201

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Without information that establishes the i...
    Rule Medium Severity
    Show

  • SRG-APP-000101-DB-000044

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

    &lt;VulnDiscussion&gt;Information system auditing capability is critical for accurate forensic analysis. Reconstruction of harmful events or forens...
    Rule Medium Severity
    Show

  • SRG-APP-000109-DB-000049

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must, by default, shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

    &lt;VulnDiscussion&gt;It is critical that when the DBMS is at risk of failing to process audit logs as required, it take action to mitigate the fai...
    Rule Medium Severity
    Show

  • SRG-APP-000109-DB-000321

    <GroupDescription></GroupDescription>
    Group
    Show

  • PostgreSQL must be configurable to overwrite audit log records, oldest first (first-in-first-out [FIFO]), in the event of unavailability of space for more audit log records.

    &lt;VulnDiscussion&gt;It is critical that when PostgreSQL is at risk of failing to process audit logs as required, it take action to mitigate the f...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules