PGS9-00-000100 - PostgreSQL must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

CAT|II

CCI|CCI-000382

CCI|CCI-001762

Rule-ID|SV-214048r508027_rule

STIG-ID|PGS9-00-000100

STIG-Legacy|SV-87493

STIG-Legacy|V-72841

Vuln-ID|V-214048

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - log_error_verbosity

CCI|CCI-000134

Rule-ID|SV-214049r508027_rule

STIG-ID|PGS9-00-000200

STIG-Legacy|SV-87495

STIG-Legacy|V-72843

Vuln-ID|V-214049

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - log_line_prefix

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit extension installed

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit loaded

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit.log

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit.log_catalog

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit.log_level

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit.log_parameter

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events - pgaudit.log_statement_once

PGS9-00-000300 - Security-relevant software updates to PostgreSQL must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

CAT|I

CCI|CCI-002605

Rule-ID|SV-214050r508027_rule

STIG-ID|PGS9-00-000300

STIG-Legacy|SV-87497

STIG-Legacy|V-72845

Vuln-ID|V-214050

PGS9-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-214053r508027_rule

STIG-ID|PGS9-00-000600

STIG-Legacy|SV-87503

STIG-Legacy|V-72851

Vuln-ID|V-214053

PGS9-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - roles

CCI|CCI-000054

Rule-ID|SV-214059r508027_rule

STIG-ID|PGS9-00-001200

STIG-Legacy|SV-87515

STIG-Legacy|V-72863

Vuln-ID|V-214059

PGS9-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types - system

PGS9-00-001800 - PostgreSQL must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-214063r508027_rule

STIG-ID|PGS9-00-001800

STIG-Legacy|SV-87523

STIG-Legacy|V-72871

Vuln-ID|V-214063

PGS9-00-001900 - PostgreSQL and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-214064r508027_rule

STIG-ID|PGS9-00-001900

STIG-Legacy|SV-87525

STIG-Legacy|V-72873

Vuln-ID|V-214064

PGS9-00-002000 - PostgreSQL and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-214065r508027_rule

STIG-ID|PGS9-00-002000

STIG-Legacy|SV-87527

STIG-Legacy|V-72875

Vuln-ID|V-214065

PGS9-00-002400 - PostgreSQL must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

CCI|CCI-001890

Rule-ID|SV-214069r508027_rule

STIG-ID|PGS9-00-002400

STIG-Legacy|SV-87539

STIG-Legacy|V-72887

Vuln-ID|V-214069

PGS9-00-002700 - PostgreSQL must provide an immediate real-time alert to appropriate support staff of all audit log failures.

CCI|CCI-001858

Rule-ID|SV-214072r508027_rule

STIG-ID|PGS9-00-002700

STIG-Legacy|SV-87545

STIG-Legacy|V-72893

Vuln-ID|V-214072

PGS9-00-003000 - PostgreSQL must maintain the confidentiality and integrity of information during reception.

CCI|CCI-002422

Rule-ID|SV-214073r548754_rule

STIG-ID|PGS9-00-003000

STIG-Legacy|SV-87547

STIG-Legacy|V-72895

Vuln-ID|V-214073

PGS9-00-003200 - The PostgreSQL software installation account must be restricted to authorized users.

CCI|CCI-001499

Rule-ID|SV-214075r836918_rule

STIG-ID|PGS9-00-003200

STIG-Legacy|SV-87551

STIG-Legacy|V-72899

Vuln-ID|V-214075

PGS9-00-003500 - PostgreSQL must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-214077r508027_rule

STIG-ID|PGS9-00-003500

STIG-Legacy|SV-87555

STIG-Legacy|V-72903

Vuln-ID|V-214077

PGS9-00-003600 - Execution of software modules (to include functions and trigger procedures) with elevated privileges must be restricted to necessary cases only.

CCI|CCI-002233

Rule-ID|SV-214078r508027_rule

STIG-ID|PGS9-00-003600

STIG-Legacy|SV-87557

STIG-Legacy|V-72905

Vuln-ID|V-214078

PGS9-00-003700 - When invalid inputs are received, PostgreSQL must behave in a predictable and documented manner that reflects organizational and system objectives.

CCI|CCI-002754

Rule-ID|SV-214079r508027_rule

STIG-ID|PGS9-00-003700

STIG-Legacy|SV-87559

STIG-Legacy|V-72907

Vuln-ID|V-214079

PGS9-00-003800 - PostgreSQL must utilize centralized management of the content captured in audit records generated by all components of PostgreSQL - log_destination

CCI|CCI-001844

Rule-ID|SV-214080r508027_rule

STIG-ID|PGS9-00-003800

STIG-Legacy|SV-87561

STIG-Legacy|V-72909

Vuln-ID|V-214080

PGS9-00-003800 - PostgreSQL must utilize centralized management of the content captured in audit records generated by all components of PostgreSQL - syslog_facility

PGS9-00-004100 - PostgreSQL must produce audit records of its enforcement of access restrictions associated with changes to the configuration of PostgreSQL or database(s).

CCI|CCI-001814

Rule-ID|SV-214082r508027_rule

STIG-ID|PGS9-00-004100

STIG-Legacy|SV-87565

STIG-Legacy|V-72913

Vuln-ID|V-214082

PGS9-00-004400 - PostgreSQL must generate audit records when categorized information (e.g., classification levels/security levels) is accessed.

CCI|CCI-000172

Rule-ID|SV-214085r508027_rule

STIG-ID|PGS9-00-004400

STIG-Legacy|SV-87571

STIG-Legacy|V-72919

Vuln-ID|V-214085

PGS9-00-004500 - PostgreSQL must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-214086r508027_rule

STIG-ID|PGS9-00-004500

STIG-Legacy|SV-87573

STIG-Legacy|V-72921

Vuln-ID|V-214086

PGS9-00-004600 - PostgreSQL must generate audit records when unsuccessful logons or connection attempts occur - log_connections

Rule-ID|SV-214087r508027_rule

STIG-ID|PGS9-00-004600

STIG-Legacy|SV-87575

STIG-Legacy|V-72923

Vuln-ID|V-214087

PGS9-00-004600 - PostgreSQL must generate audit records when unsuccessful logons or connection attempts occur - log_line_prefix

PGS9-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s) - log_connections

Rule-ID|SV-214088r508027_rule

STIG-ID|PGS9-00-004700

STIG-Legacy|SV-87577

STIG-Legacy|V-72925

Vuln-ID|V-214088

PGS9-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s) - log_disconnection

PGS9-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s) - log_line_prefix

PGS9-00-004800 - PostgreSQL must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-214089r508027_rule

STIG-ID|PGS9-00-004800

STIG-Legacy|SV-87579

STIG-Legacy|V-72927

Vuln-ID|V-214089

PGS9-00-004900 - PostgreSQL must generate audit records when privileges/permissions are added.

Rule-ID|SV-214090r508027_rule

STIG-ID|PGS9-00-004900

STIG-Legacy|SV-87581

STIG-Legacy|V-72929

Vuln-ID|V-214090

PGS9-00-005000 - PostgreSQL must generate audit records when unsuccessful attempts to delete categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-214091r508027_rule

STIG-ID|PGS9-00-005000

STIG-Legacy|SV-87583

STIG-Legacy|V-72931

Vuln-ID|V-214091

PGS9-00-005100 - PostgreSQL must generate audit records when successful logons or connections occur - log_connections

Rule-ID|SV-214092r508027_rule

STIG-ID|PGS9-00-005100

STIG-Legacy|SV-87585

STIG-Legacy|V-72933

Vuln-ID|V-214092

PGS9-00-005100 - PostgreSQL must generate audit records when successful logons or connections occur - log_line_prefix

PGS9-00-005200 - PostgreSQL must generate audit records when security objects are deleted.

Rule-ID|SV-214093r508027_rule

STIG-ID|PGS9-00-005200

STIG-Legacy|SV-87591

STIG-Legacy|V-72939

Vuln-ID|V-214093

PGS9-00-005300 - PostgreSQL must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-214094r508027_rule

STIG-ID|PGS9-00-005300

STIG-Legacy|SV-87593

STIG-Legacy|V-72941

Vuln-ID|V-214094

PGS9-00-005400 - PostgreSQL must generate audit records when unsuccessful attempts to delete privileges/permissions occur.

Detections

Analytics

DISA STIG PostgreSQL 9.x on RHEL DB v2r3

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous