The EDB Postgres Advanced Server must generate audit records when security objects are deleted.
An XCCDF Rule
Description
The removal of security objects from the database/DBMS would seriously degrade a system's information assurance posture. If such an event occurs, it must be logged.
- ID
- SV-259312r961818_rule
- Version
- EPAS-00-011400
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Execute the following SQL as the "enterprisedb" operating system user:
> psql edb -c "ALTER SYSTEM SET edb_audit_statement = 'all'"
> psql edb -c "SELECT pg_reload_conf()"
or