Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
EnterpriseDB Postgres Advanced Server (EPAS) Security Technical Implementation Guide
SRG-APP-000492-DB-000333
The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to access security objects occur.
The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to access security objects occur.
An XCCDF Rule
Details
Profiles
Prose
The EDB Postgres Advanced Server must generate audit records when unsuccessful attempts to access security objects occur.
Medium Severity
<VulnDiscussion>Changes to the security configuration must be tracked. This requirement applies to situations where security data is retrieved or modified via data manipulation operations, as opposed to via specialized security functionality. In an SQL environment, types of access include, but are not necessarily limited to: SELECT INSERT UPDATE DELETE EXECUTE To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>