Skip to content
Log In

EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000133-DB-000179

    Group
    Show

  • Software, applications, and configuration files that are part of, or related to, the EDB Postgres Advanced Server installation must be monitored to discover unauthorized changes.

    If the system were to allow any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robus...
    Rule Medium Severity
    Show

  • SRG-APP-000133-DB-000179

    Group
    Show

  • SRG-APP-000172-DB-000075

    Group
    Show

  • SRG-APP-000133-DB-000198

    Group
    Show

  • SRG-APP-000133-DB-000199

    Group
    Show

  • Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

    When dealing with change control issues, it should be noted any changes to the hardware, software, and/or firmware components of the information system and/or application can potentially have signi...
    Rule Medium Severity
    Show

  • SRG-APP-000133-DB-000200

    Group
    Show

  • SRG-APP-000133-DB-000362

    Group
    Show

  • SRG-APP-000141-DB-000090

    Group
    Show

  • Default, demonstration and sample databases, database objects, and applications must be removed.

    Information systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizatio...
    Rule Medium Severity
    Show

  • SRG-APP-000141-DB-000091

    Group
    Show

  • Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

    Information systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizatio...
    Rule Medium Severity
    Show

  • SRG-APP-000141-DB-000092

    Group
    Show

  • SRG-APP-000141-DB-000093

    Group
    Show

  • SRG-APP-000142-DB-000094

    Group
    Show

  • The EDB Postgres Advanced Server must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

    In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data types within data types), organizations must disable...
    Rule Medium Severity
    Show

  • SRG-APP-000148-DB-000103

    Group
    Show

  • SRG-APP-000164-DB-000401

    Group
    Show

  • If DBMS authentication, using passwords, is employed, EDB Postgres Advanced Server must enforce the DOD standards for password complexity and lifetime.

    OS/enterprise authentication and identification must be used (SRG-APP-000023-DB-000001). Native DBMS authentication may be used only when circumstances make it unavoidable, and must be documented a...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules