PGS9-00-000100 - PostgreSQL must be configured to prohibit or restrict the use of organization-defined functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

CAT|II

CCI|CCI-000382

CCI|CCI-001762

Rule-ID|SV-214048r879588_rule

STIG-ID|PGS9-00-000100

STIG-Legacy|SV-87493

STIG-Legacy|V-72841

Vuln-ID|V-214048

PGS9-00-000200 - PostgreSQL must produce audit records containing sufficient information to establish the outcome (success or failure) of the events.

CCI|CCI-000134

Rule-ID|SV-214049r879567_rule

STIG-ID|PGS9-00-000200

STIG-Legacy|SV-87495

STIG-Legacy|V-72843

Vuln-ID|V-214049

PGS9-00-000300 - Security-relevant software updates to PostgreSQL must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

CAT|I

CCI|CCI-002605

Rule-ID|SV-214050r879827_rule

STIG-ID|PGS9-00-000300

STIG-Legacy|SV-87497

STIG-Legacy|V-72845

Vuln-ID|V-214050

PGS9-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-214053r879655_rule

STIG-ID|PGS9-00-000600

STIG-Legacy|SV-87503

STIG-Legacy|V-72851

Vuln-ID|V-214053

PGS9-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.

CCI|CCI-000054

Rule-ID|SV-214059r879511_rule

STIG-ID|PGS9-00-001200

STIG-Legacy|SV-87515

STIG-Legacy|V-72863

Vuln-ID|V-214059

PGS9-00-001800 - PostgreSQL must check the validity of all data inputs except those specifically identified by the organization.

CCI|CCI-001310

Rule-ID|SV-214063r879652_rule

STIG-ID|PGS9-00-001800

STIG-Legacy|SV-87523

STIG-Legacy|V-72871

Vuln-ID|V-214063

PGS9-00-001900 - PostgreSQL and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-214064r879652_rule

STIG-ID|PGS9-00-001900

STIG-Legacy|SV-87525

STIG-Legacy|V-72873

Vuln-ID|V-214064

PGS9-00-002000 - PostgreSQL and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

Rule-ID|SV-214065r879652_rule

STIG-ID|PGS9-00-002000

STIG-Legacy|SV-87527

STIG-Legacy|V-72875

Vuln-ID|V-214065

PGS9-00-002400 - PostgreSQL must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

CCI|CCI-001890

Rule-ID|SV-214069r879747_rule

STIG-ID|PGS9-00-002400

STIG-Legacy|SV-87539

STIG-Legacy|V-72887

Vuln-ID|V-214069

PGS9-00-002700 - PostgreSQL must provide an immediate real-time alert to appropriate support staff of all audit log failures.

CCI|CCI-001858

Rule-ID|SV-214072r879733_rule

STIG-ID|PGS9-00-002700

STIG-Legacy|SV-87545

STIG-Legacy|V-72893

Vuln-ID|V-214072

PGS9-00-003000 - PostgreSQL must maintain the confidentiality and integrity of information during reception.

CCI|CCI-002422

Rule-ID|SV-214073r879813_rule

STIG-ID|PGS9-00-003000

STIG-Legacy|SV-87547

STIG-Legacy|V-72895

Vuln-ID|V-214073

PGS9-00-003200 - The PostgreSQL software installation account must be restricted to authorized users.

CCI|CCI-001499

Rule-ID|SV-214075r879586_rule

STIG-ID|PGS9-00-003200

STIG-Legacy|SV-87551

STIG-Legacy|V-72899

Vuln-ID|V-214075

PGS9-00-003500 - PostgreSQL must include additional, more detailed, organization-defined information in the audit records for audit events identified by type, location, or subject.

CCI|CCI-000135

Rule-ID|SV-214077r879569_rule

STIG-ID|PGS9-00-003500

STIG-Legacy|SV-87555

STIG-Legacy|V-72903

Vuln-ID|V-214077

PGS9-00-003600 - Execution of software modules (to include functions and trigger procedures) with elevated privileges must be restricted to necessary cases only.

CCI|CCI-002233

Rule-ID|SV-214078r879719_rule

STIG-ID|PGS9-00-003600

STIG-Legacy|SV-87557

STIG-Legacy|V-72905

Vuln-ID|V-214078

PGS9-00-003700 - When invalid inputs are received, PostgreSQL must behave in a predictable and documented manner that reflects organizational and system objectives.

CCI|CCI-002754

Rule-ID|SV-214079r879818_rule

STIG-ID|PGS9-00-003700

STIG-Legacy|SV-87559

STIG-Legacy|V-72907

Vuln-ID|V-214079

PGS9-00-003800 - PostgreSQL must utilize centralized management of the content captured in audit records generated by all components of PostgreSQL.

CCI|CCI-001844

Rule-ID|SV-214080r879729_rule

STIG-ID|PGS9-00-003800

STIG-Legacy|SV-87561

STIG-Legacy|V-72909

Vuln-ID|V-214080

PGS9-00-004100 - PostgreSQL must produce audit records of its enforcement of access restrictions associated with changes to the configuration of PostgreSQL or database(s).

CCI|CCI-001814

Rule-ID|SV-214082r879754_rule

STIG-ID|PGS9-00-004100

STIG-Legacy|SV-87565

STIG-Legacy|V-72913

Vuln-ID|V-214082

PGS9-00-004400 - PostgreSQL must generate audit records when categorized information (e.g., classification levels/security levels) is accessed.

CCI|CCI-000172

Rule-ID|SV-214085r879865_rule

STIG-ID|PGS9-00-004400

STIG-Legacy|SV-87571

STIG-Legacy|V-72919

Vuln-ID|V-214085

PGS9-00-004500 - PostgreSQL must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-214086r879863_rule

STIG-ID|PGS9-00-004500

STIG-Legacy|SV-87573

STIG-Legacy|V-72921

Vuln-ID|V-214086

PGS9-00-004600 - PostgreSQL must generate audit records when unsuccessful logons or connection attempts occur.

Rule-ID|SV-214087r879874_rule

STIG-ID|PGS9-00-004600

STIG-Legacy|SV-87575

STIG-Legacy|V-72923

Vuln-ID|V-214087

PGS9-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s).

Rule-ID|SV-214088r879876_rule

STIG-ID|PGS9-00-004700

STIG-Legacy|SV-87577

STIG-Legacy|V-72925

Vuln-ID|V-214088

PGS9-00-004800 - PostgreSQL must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-214089r879867_rule

STIG-ID|PGS9-00-004800

STIG-Legacy|SV-87579

STIG-Legacy|V-72927

Vuln-ID|V-214089

PGS9-00-004900 - PostgreSQL must generate audit records when privileges/permissions are added.

Rule-ID|SV-214090r879866_rule

STIG-ID|PGS9-00-004900

STIG-Legacy|SV-87581

STIG-Legacy|V-72929

Vuln-ID|V-214090

PGS9-00-005000 - PostgreSQL must generate audit records when unsuccessful attempts to delete categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-214091r879873_rule

STIG-ID|PGS9-00-005000

STIG-Legacy|SV-87583

STIG-Legacy|V-72931

Vuln-ID|V-214091

PGS9-00-005100 - PostgreSQL must generate audit records when successful logons or connections occur.

Rule-ID|SV-214092r879874_rule

STIG-ID|PGS9-00-005100

STIG-Legacy|SV-87585

STIG-Legacy|V-72933

Vuln-ID|V-214092

PGS9-00-005200 - PostgreSQL must generate audit records when security objects are deleted.

Rule-ID|SV-214093r879872_rule

STIG-ID|PGS9-00-005200

STIG-Legacy|SV-87591

STIG-Legacy|V-72939

Vuln-ID|V-214093

PGS9-00-005300 - PostgreSQL must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-214094r879561_rule

STIG-ID|PGS9-00-005300

STIG-Legacy|SV-87593

STIG-Legacy|V-72941

Vuln-ID|V-214094

PGS9-00-005400 - PostgreSQL must generate audit records when unsuccessful attempts to delete privileges/permissions occur.

Rule-ID|SV-214095r879870_rule

STIG-ID|PGS9-00-005400

STIG-Legacy|SV-87597

STIG-Legacy|V-72945

Vuln-ID|V-214095

PGS9-00-005500 - PostgreSQL must be able to generate audit records when privileges/permissions are retrieved.

Rule-ID|SV-214096r879561_rule

STIG-ID|PGS9-00-005500

STIG-Legacy|SV-87599

STIG-Legacy|V-72947

Vuln-ID|V-214096

PGS9-00-005600 - PostgreSQL must generate audit records when unsuccessful attempts to modify categorized information (e.g., classification levels/security levels) occur.

Rule-ID|SV-214097r879869_rule

STIG-ID|PGS9-00-005600

STIG-Legacy|SV-87601

STIG-Legacy|V-72949

Vuln-ID|V-214097

PGS9-00-005700 - PostgreSQL must generate audit records when unsuccessful accesses to objects occur.

Rule-ID|SV-214098r879878_rule

Detections

Analytics

DISA STIG PostgreSQL 9.x on RHEL DB v2r4

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Aug 26, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Jun 17, 2024 Miscellaneous Metadata updated.

Detections

Analytics

DISA STIG PostgreSQL 9.x on RHEL DB v2r4 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

DISA STIG PostgreSQL 9.x on RHEL DB v2r4