DISA_STIG_EDB_PostgreSQL_Advanced_Server_v2r1_OS_Linux.audit from DISA EDB Postgres Advanced Server v2r1 STIG

PPS9-00-000700 - The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-3

CAT|II

CCI|CCI-000015

Rule-ID|SV-213562r508024_rule

STIG-ID|PPS9-00-000700

STIG-Legacy|SV-83481

STIG-Legacy|V-68877

Vuln-ID|V-213562

PPS9-00-001100 - The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|CM-6

CCI|CCI-000171

CSCv6|3.1

Rule-ID|SV-213566r508024_rule

STIG-ID|PPS9-00-001100

STIG-Legacy|SV-83489

STIG-Legacy|V-68885

Vuln-ID|V-213566

PPS9-00-002300 - The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

CCI|CCI-000140

Rule-ID|SV-213577r508024_rule

STIG-ID|PPS9-00-002300

STIG-Legacy|SV-83513

STIG-Legacy|V-68909

Vuln-ID|V-213577

PPS9-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

CAT|I

Rule-ID|SV-213578r508024_rule

STIG-ID|PPS9-00-002400

STIG-Legacy|SV-83515

STIG-Legacy|V-68911

Vuln-ID|V-213578

PPS9-00-002600 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-213579r508024_rule

STIG-ID|PPS9-00-002600

STIG-Legacy|SV-83517

STIG-Legacy|V-68913

Vuln-ID|V-213579

PPS9-00-002700 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-213580r508024_rule

STIG-ID|PPS9-00-002700

STIG-Legacy|SV-83519

STIG-Legacy|V-68915

Vuln-ID|V-213580

PPS9-00-002800 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-213581r508024_rule

STIG-ID|PPS9-00-002800

STIG-Legacy|SV-83521

STIG-Legacy|V-68917

Vuln-ID|V-213581

PPS9-00-002900 - The EDB Postgres Advanced Server must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-213582r508024_rule

STIG-ID|PPS9-00-002900

STIG-Legacy|SV-83523

STIG-Legacy|V-68919

Vuln-ID|V-213582

PPS9-00-003000 - The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-213583r508024_rule

STIG-ID|PPS9-00-003000

STIG-Legacy|SV-83525

STIG-Legacy|V-68921

Vuln-ID|V-213583

PPS9-00-003100 - The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-213584r508024_rule

STIG-ID|PPS9-00-003100

STIG-Legacy|SV-83527

STIG-Legacy|V-68923

Vuln-ID|V-213584

PPS9-00-003200 - Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server  installation must be monitored to discover unauthorized changes.

CCI|CCI-001499

Rule-ID|SV-213585r508024_rule

STIG-ID|PPS9-00-003200

STIG-Legacy|SV-83529

STIG-Legacy|V-68925

Vuln-ID|V-213585

PPS9-00-003400 - Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

Rule-ID|SV-213588r508024_rule

STIG-ID|PPS9-00-003400

STIG-Legacy|SV-83535

STIG-Legacy|V-68931

Vuln-ID|V-213588

PPS9-00-003600 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

800-53|AC-6

Rule-ID|SV-213590r508024_rule

STIG-ID|PPS9-00-003600

STIG-Legacy|SV-83539

STIG-Legacy|V-68935

Vuln-ID|V-213590

PPS9-00-003800 - Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

800-53|CM-7

CCI|CCI-000381

CSCv6|9.1

Rule-ID|SV-213592r508024_rule

STIG-ID|PPS9-00-003800

STIG-Legacy|SV-83543

STIG-Legacy|V-68939

Vuln-ID|V-213592

PPS9-00-003900 - Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

Rule-ID|SV-213593r508024_rule

STIG-ID|PPS9-00-003900

STIG-Legacy|SV-83545

STIG-Legacy|V-68941

Vuln-ID|V-213593

PPS9-00-004000 - Access to external executables must be disabled or restricted.

Rule-ID|SV-213594r508024_rule

STIG-ID|PPS9-00-004000

STIG-Legacy|SV-83547

STIG-Legacy|V-68943

Vuln-ID|V-213594

PPS9-00-004200 - The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

CCI|CCI-000764

Rule-ID|SV-213596r508024_rule

STIG-ID|PPS9-00-004200

STIG-Legacy|SV-83695

STIG-Legacy|V-69091

Vuln-ID|V-213596

PPS9-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

CCI|CCI-000197

Rule-ID|SV-213598r508024_rule

STIG-ID|PPS9-00-004400

STIG-Legacy|SV-83553

STIG-Legacy|V-68949

Vuln-ID|V-213598

PPS9-00-004500 - The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|SC-8(1)

CCI|CCI-000185

Rule-ID|SV-213599r508024_rule

STIG-ID|PPS9-00-004500

STIG-Legacy|SV-83555

STIG-Legacy|V-68951

Vuln-ID|V-213599

PPS9-00-004600 - The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

CCI|CCI-000186

Rule-ID|SV-213600r508024_rule

STIG-ID|PPS9-00-004600

STIG-Legacy|SV-83557

STIG-Legacy|V-68953

Vuln-ID|V-213600

PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations - openssl

800-53|SC-13

CCI|CCI-000803

Rule-ID|SV-213603r508024_rule

STIG-ID|PPS9-00-004900

STIG-Legacy|SV-83563

STIG-Legacy|V-68959

Vuln-ID|V-213603

PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations - RHEL

800-53|CM-8

PPS9-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

800-53|SC-28(1)

CCI|CCI-001199

CSCv6|13.2

Rule-ID|SV-213604r508024_rule

STIG-ID|PPS9-00-005700

STIG-Legacy|SV-83565

STIG-Legacy|V-68961

Vuln-ID|V-213604

PPS9-00-006100 - Access to database files must be limited to relevant processes and to authorized, administrative users.

CCI|CCI-001090

Rule-ID|SV-213607r508024_rule

STIG-ID|PPS9-00-006100

STIG-Legacy|SV-83571

STIG-Legacy|V-68967

Vuln-ID|V-213607

PPS9-00-008000 - The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

CCI|CCI-001855

Rule-ID|SV-213623r508024_rule

STIG-ID|PPS9-00-008000

STIG-Legacy|SV-83603

STIG-Legacy|V-68999

Vuln-ID|V-213623

PPS9-00-008400 - The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

CCI|CCI-001812

Rule-ID|SV-213625r508024_rule

STIG-ID|PPS9-00-008400

STIG-Legacy|SV-83607

STIG-Legacy|V-69003

Vuln-ID|V-213625

PPS9-00-008500 - The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

CCI|CCI-001813

Rule-ID|SV-213626r508024_rule

STIG-ID|PPS9-00-008500

STIG-Legacy|SV-83609

STIG-Legacy|V-69005

Vuln-ID|V-213626

PPS9-00-008700 - The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance - Port

CCI|CCI-001762

Rule-ID|SV-213628r508024_rule

STIG-ID|PPS9-00-008700

STIG-Legacy|SV-83613

STIG-Legacy|V-69009

Vuln-ID|V-213628

PPS9-00-008700 - The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance - SSL

PPS9-00-009100 - The EDB Postgres Advanced Server must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions - CAs

Detections

Analytics

EDB PostgreSQL Advanced Server OS Linux Audit v2r1

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.6

Miscellaneous

Added

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.6 Apr 12, 2023 Miscellaneous Metadata updated. Platform check updated. Added DISA_STIG_EDB_PostgreSQL_Advanced_Server_v2r1_OS_Linux.audit from DISA EDB Postgres Advanced Server v2r1 STIG
Revision 1.5 Feb 6, 2023 Miscellaneous Audit deprecated. Metadata updated. References updated. Variables updated.
Revision 1.4 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.3 Apr 25, 2022 Miscellaneous Metadata updated. References updated.
Revision 1.2 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2021 Miscellaneous Metadata updated. References updated.