PPS9-00-000700 - The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-3

CAT|II

CCI|CCI-000015

Rule-ID|SV-83481r1_rule

STIG-ID|PPS9-00-000700

Vuln-ID|V-68877

PPS9-00-001100 - The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|CM-6

CCI|CCI-000171

CSCv6|3.1

Rule-ID|SV-83489r1_rule

STIG-ID|PPS9-00-001100

Vuln-ID|V-68885

PPS9-00-002300 - The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

CCI|CCI-000140

Rule-ID|SV-83513r1_rule

STIG-ID|PPS9-00-002300

Vuln-ID|V-68909

PPS9-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

CAT|I

Rule-ID|SV-83515r1_rule

STIG-ID|PPS9-00-002400

Vuln-ID|V-68911

PPS9-00-002600 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-83517r1_rule

STIG-ID|PPS9-00-002600

Vuln-ID|V-68913

PPS9-00-002700 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-83519r1_rule

STIG-ID|PPS9-00-002700

Vuln-ID|V-68915

PPS9-00-002800 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-83521r1_rule

STIG-ID|PPS9-00-002800

Vuln-ID|V-68917

PPS9-00-002900 - The EDB Postgres Advanced Server must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-83523r1_rule

STIG-ID|PPS9-00-002900

Vuln-ID|V-68919

PPS9-00-003000 - The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-83525r1_rule

STIG-ID|PPS9-00-003000

Vuln-ID|V-68921

PPS9-00-003100 - The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-83527r1_rule

STIG-ID|PPS9-00-003100

Vuln-ID|V-68923

PPS9-00-003200 - Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server  installation must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-83529r1_rule

STIG-ID|PPS9-00-003200

Vuln-ID|V-68925

PPS9-00-003400 - Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

Rule-ID|SV-83535r1_rule

STIG-ID|PPS9-00-003400

Vuln-ID|V-68931

PPS9-00-003600 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

800-53|AC-6

Rule-ID|SV-83539r1_rule

STIG-ID|PPS9-00-003600

Vuln-ID|V-68935

PPS9-00-003800 - Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

800-53|CM-7

CCI|CCI-000381

CSCv6|9.1

Rule-ID|SV-83543r1_rule

STIG-ID|PPS9-00-003800

Vuln-ID|V-68939

PPS9-00-003900 - Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

Rule-ID|SV-83545r1_rule

STIG-ID|PPS9-00-003900

Vuln-ID|V-68941

PPS9-00-004000 - Access to external executables must be disabled or restricted.

Rule-ID|SV-83547r1_rule

STIG-ID|PPS9-00-004000

Vuln-ID|V-68943

PPS9-00-004200 - The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

CCI|CCI-000764

Rule-ID|SV-83695r1_rule

STIG-ID|PPS9-00-004200

Vuln-ID|V-69091

PPS9-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

CCI|CCI-000197

Rule-ID|SV-83553r1_rule

STIG-ID|PPS9-00-004400

Vuln-ID|V-68949

PPS9-00-004500 - The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|SC-8(1)

CCI|CCI-000185

Rule-ID|SV-83555r1_rule

STIG-ID|PPS9-00-004500

Vuln-ID|V-68951

PPS9-00-004600 - The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

CCI|CCI-000186

Rule-ID|SV-83557r1_rule

STIG-ID|PPS9-00-004600

Vuln-ID|V-68953

PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations - openssl

800-53|SC-13

CCI|CCI-000803

Rule-ID|SV-83563r1_rule

STIG-ID|PPS9-00-004900

Vuln-ID|V-68959

PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations - RHEL

800-53|CM-8

PPS9-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

800-53|SC-28(1)

CCI|CCI-001199

CSCv6|13.2

Rule-ID|SV-83565r2_rule

STIG-ID|PPS9-00-005700

Vuln-ID|V-68961

PPS9-00-006100 - Access to database files must be limited to relevant processes and to authorized, administrative users.

CCI|CCI-001090

Rule-ID|SV-83571r1_rule

STIG-ID|PPS9-00-006100

Vuln-ID|V-68967

PPS9-00-008000 - The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

CCI|CCI-001855

Rule-ID|SV-83603r1_rule

STIG-ID|PPS9-00-008000

Vuln-ID|V-68999

PPS9-00-008400 - The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

CCI|CCI-001812

Rule-ID|SV-83607r1_rule

STIG-ID|PPS9-00-008400

Vuln-ID|V-69003

PPS9-00-008500 - The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

CCI|CCI-001813

Rule-ID|SV-83609r1_rule

STIG-ID|PPS9-00-008500

Vuln-ID|V-69005

PPS9-00-008700 - The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance - Port

CCI|CCI-001762

Rule-ID|SV-83613r1_rule

STIG-ID|PPS9-00-008700

Vuln-ID|V-69009

PPS9-00-008700 - The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance - SSL

PPS9-00-009100 - The EDB Postgres Advanced Server must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions - CAs

CCI|CCI-002470

Rule-ID|SV-83617r1_rule

STIG-ID|PPS9-00-009100

Vuln-ID|V-69013

PPS9-00-009200 - The EDB Postgres Advanced Server must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

CCI|CCI-002475

Rule-ID|SV-83619r1_rule

STIG-ID|PPS9-00-009200

Vuln-ID|V-69015

PPS9-00-009300 - The EDB Postgres Advanced Server must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.

CCI|CCI-002476

Rule-ID|SV-83621r1_rule

STIG-ID|PPS9-00-009300

Vuln-ID|V-69017

PPS9-00-009500 - The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.

CCI|CCI-002420

Rule-ID|SV-83623r1_rule

STIG-ID|PPS9-00-009500

Vuln-ID|V-69019

PPS9-00-009600 - The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during reception.

CCI|CCI-002422

Rule-ID|SV-83625r1_rule

STIG-ID|PPS9-00-009600

Vuln-ID|V-69021

PPS9-00-012700 - The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures.

CCI|CCI-002450

Rule-ID|SV-83681r1_rule

STIG-ID|PPS9-00-012700

Vuln-ID|V-69077

PPS9-00-012800 - The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to generate and validate cryptographic hashes.

Rule-ID|SV-83683r1_rule

STIG-ID|PPS9-00-012800

Vuln-ID|V-69079

PPS9-00-012900 - The EDB Postgres Advanced Server must implement NIST FIPS 140-2 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the requirements of the data owner.

Rule-ID|SV-83685r1_rule

STIG-ID|PPS9-00-012900

Vuln-ID|V-69081

PPS9-00-013200 - The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 installation of OpenSSL.

Detections

Analytics

EDB PostgreSQL Advanced Server OS Linux Audit v1r7

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Functional Update

Miscellaneous

Revision 1.1

Miscellaneous