DISA_STIG_EDB_PostgreSQL_Advanced_Server_v9.6_v2r3_OS_Linux.audit from DISA EDB Postgres Advanced Server v9.6 v2r3 STIG

PPS9-00-000700 - The EDB Postgres Advanced Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-213562r879522_rule

STIG-ID|PPS9-00-000700

STIG-Legacy|SV-83481

STIG-Legacy|V-68877

Vuln-ID|V-213562

PPS9-00-001100 - The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|AU-12b.

CAT|II

CCI|CCI-000171

Rule-ID|SV-213566r879560_rule

STIG-ID|PPS9-00-001100

STIG-Legacy|SV-83489

STIG-Legacy|V-68885

Vuln-ID|V-213566

PPS9-00-002300 - The EDB Postgres Advanced Server must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-213577r879571_rule

STIG-ID|PPS9-00-002300

STIG-Legacy|SV-83513

STIG-Legacy|V-68909

Vuln-ID|V-213577

PPS9-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

Rule-ID|SV-213578r879571_rule

STIG-ID|PPS9-00-002400

STIG-Legacy|SV-83515

STIG-Legacy|V-68911

Vuln-ID|V-213578

PPS9-00-002600 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized read access.

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-213579r879576_rule

STIG-ID|PPS9-00-002600

STIG-Legacy|SV-83517

STIG-Legacy|V-68913

Vuln-ID|V-213579

PPS9-00-002700 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-213580r879577_rule

STIG-ID|PPS9-00-002700

STIG-Legacy|SV-83519

STIG-Legacy|V-68915

Vuln-ID|V-213580

PPS9-00-002800 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-213581r879578_rule

STIG-ID|PPS9-00-002800

STIG-Legacy|SV-83521

STIG-Legacy|V-68917

Vuln-ID|V-213581

PPS9-00-002900 - The EDB Postgres Advanced Server must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-213582r879579_rule

STIG-ID|PPS9-00-002900

STIG-Legacy|SV-83523

STIG-Legacy|V-68919

Vuln-ID|V-213582

PPS9-00-003000 - The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-213583r879580_rule

STIG-ID|PPS9-00-003000

STIG-Legacy|SV-83525

STIG-Legacy|V-68921

Vuln-ID|V-213583

PPS9-00-003100 - The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-213584r879581_rule

STIG-ID|PPS9-00-003100

STIG-Legacy|SV-83527

STIG-Legacy|V-68923

Vuln-ID|V-213584

PPS9-00-003200 - Software, applications, and configuration files that are part of, or related to, the Postgres Plus Advanced Server  installation must be monitored to discover unauthorized changes.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-213585r879586_rule

STIG-ID|PPS9-00-003200

STIG-Legacy|SV-83529

STIG-Legacy|V-68925

Vuln-ID|V-213585

PPS9-00-003400 - Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

Rule-ID|SV-213588r879586_rule

STIG-ID|PPS9-00-003400

STIG-Legacy|SV-83535

STIG-Legacy|V-68931

Vuln-ID|V-213588

PPS9-00-003600 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to the EDB Postgres Advanced Server, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

Rule-ID|SV-213590r879586_rule

STIG-ID|PPS9-00-003600

STIG-Legacy|SV-83539

STIG-Legacy|V-68935

Vuln-ID|V-213590

PPS9-00-003800 - Unused database components, EDB Postgres Advanced Server software, and database objects must be removed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-213592r879587_rule

STIG-ID|PPS9-00-003800

STIG-Legacy|SV-83543

STIG-Legacy|V-68939

Vuln-ID|V-213592

PPS9-00-003900 - Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.

Rule-ID|SV-213593r879587_rule

STIG-ID|PPS9-00-003900

STIG-Legacy|SV-83545

STIG-Legacy|V-68941

Vuln-ID|V-213593

PPS9-00-004000 - Access to external executables must be disabled or restricted.

Rule-ID|SV-213594r879587_rule

STIG-ID|PPS9-00-004000

STIG-Legacy|SV-83547

STIG-Legacy|V-68943

Vuln-ID|V-213594

PPS9-00-004200 - The EDB Postgres Advanced Server must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-213596r879589_rule

STIG-ID|PPS9-00-004200

STIG-Legacy|SV-83695

STIG-Legacy|V-69091

Vuln-ID|V-213596

PPS9-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-213598r879609_rule

STIG-ID|PPS9-00-004400

STIG-Legacy|SV-83553

STIG-Legacy|V-68949

Vuln-ID|V-213598

PPS9-00-004500 - The EDB Postgres Advanced Server, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-213599r879612_rule

STIG-ID|PPS9-00-004500

STIG-Legacy|SV-83555

STIG-Legacy|V-68951

Vuln-ID|V-213599

PPS9-00-004600 - The EDB Postgres Advanced Server must enforce authorized access to all PKI private keys stored/utilized by the EDB Postgres Advanced Server.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-213600r879613_rule

STIG-ID|PPS9-00-004600

STIG-Legacy|SV-83557

STIG-Legacy|V-68953

Vuln-ID|V-213600

PPS9-00-004900 - The EDB Postgres Advanced Server must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-213603r879616_rule

STIG-ID|PPS9-00-004900

STIG-Legacy|SV-83563

STIG-Legacy|V-68959

Vuln-ID|V-213603

PPS9-00-005700 - The EDB Postgres Advanced Server must protect the confidentiality and integrity of all information at rest.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-213604r879642_rule

STIG-ID|PPS9-00-005700

STIG-Legacy|SV-83565

STIG-Legacy|V-68961

Vuln-ID|V-213604

PPS9-00-006100 - Access to database files must be limited to relevant processes and to authorized, administrative users.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-213607r879649_rule

STIG-ID|PPS9-00-006100

STIG-Legacy|SV-83571

STIG-Legacy|V-68967

Vuln-ID|V-213607

PPS9-00-008000 - The EDB Postgres Advanced Server must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75% of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-213623r879732_rule

STIG-ID|PPS9-00-008000

STIG-Legacy|SV-83603

STIG-Legacy|V-68999

Vuln-ID|V-213623

PPS9-00-008400 - The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.

800-53|CM-11(2)

CCI|CCI-001812

Rule-ID|SV-213625r879751_rule

STIG-ID|PPS9-00-008400

STIG-Legacy|SV-83607

STIG-Legacy|V-69003

Vuln-ID|V-213625

PPS9-00-008500 - The EDB Postgres Advanced Server must enforce access restrictions associated with changes to the configuration of the EDB Postgres Advanced Server or database(s).

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-213626r879753_rule

STIG-ID|PPS9-00-008500

STIG-Legacy|SV-83609

STIG-Legacy|V-69005

Vuln-ID|V-213626

PPS9-00-008700 - The EDB Postgres Advanced Server must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

800-53|CM-7(1)(b)

CCI|CCI-001762

Rule-ID|SV-213628r879756_rule

STIG-ID|PPS9-00-008700

Detections

Analytics

EDB PostgreSQL Advanced Server OS Linux Audit v2r3

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous