DISA_STIG_PostgreSQL_9-x_on_RHEL_v2r5_OS.audit from DISA PostgreSQL 9.x v2r5 STIG

PGS9-00-000400 - The audit information produced by PostgreSQL must be protected from unauthorized modification - log directory

800-53|AU-9

CAT|II

CCI|CCI-000163

Rule-ID|SV-214051r960933_rule

STIG-ID|PGS9-00-000400

STIG-Legacy|SV-87499

STIG-Legacy|V-72847

Vuln-ID|V-214051

PGS9-00-000400 - The audit information produced by PostgreSQL must be protected from unauthorized modification - log files

PGS9-00-000400 - The audit information produced by PostgreSQL must be protected from unauthorized modification - log_file_mode

PGS9-00-000500 - PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.

800-53|AC-2(1)

CAT|I

CCI|CCI-000015

Rule-ID|SV-214052r960768_rule

STIG-ID|PGS9-00-000500

STIG-Legacy|SV-87501

STIG-Legacy|V-72849

Vuln-ID|V-214052

PGS9-00-000700 - Privileges to change PostgreSQL software modules must be limited.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-214054r960960_rule

STIG-ID|PGS9-00-000700

STIG-Legacy|SV-87505

STIG-Legacy|V-72853

Vuln-ID|V-214054

PGS9-00-000710 - PostgreSQL must limit privileges to change functions and triggers, and links to software external to PostgreSQL.

Rule-ID|SV-214055r960960_rule

STIG-ID|PGS9-00-000710

STIG-Legacy|SV-87507

STIG-Legacy|V-72855

Vuln-ID|V-214055

PGS9-00-000800 - If passwords are used for authentication, PostgreSQL must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-214056r961029_rule

STIG-ID|PGS9-00-000800

STIG-Legacy|SV-87509

STIG-Legacy|V-72857

Vuln-ID|V-214056

PGS9-00-000900 - PostgreSQL must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-214057r960792_rule

STIG-ID|PGS9-00-000900

STIG-Legacy|SV-87511

STIG-Legacy|V-72859

Vuln-ID|V-214057

PGS9-00-001100 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in transmission.

800-53|AC-16a.

CCI|CCI-002264

Rule-ID|SV-214058r961275_rule

STIG-ID|PGS9-00-001100

STIG-Legacy|SV-87513

STIG-Legacy|V-72861

Vuln-ID|V-214058

PGS9-00-001300 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (functions, trigger procedures, links to software external to PostgreSQL, etc.) must be restricted to authorized users - s used to modify database structure and logic modules must be restricted to authorized users.

Rule-ID|SV-214060r960960_rule

STIG-ID|PGS9-00-001300

STIG-Legacy|SV-87517

STIG-Legacy|V-72865

Vuln-ID|V-214060

PGS9-00-001400 - PostgreSQL must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users).

800-53|IA-8

CCI|CCI-000804

Rule-ID|SV-214061r961053_rule

STIG-ID|PGS9-00-001400

STIG-Legacy|SV-87519

STIG-Legacy|V-72867

Vuln-ID|V-214061

PGS9-00-001700 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in storage.

CCI|CCI-002262

Rule-ID|SV-214062r961269_rule

STIG-ID|PGS9-00-001700

STIG-Legacy|SV-87521

STIG-Legacy|V-72869

Vuln-ID|V-214062

PGS9-00-002100 - PostgreSQL must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-214066r961392_rule

STIG-ID|PGS9-00-002100

STIG-Legacy|SV-87529

STIG-Legacy|V-72877

Vuln-ID|V-214066

PGS9-00-002200 - PostgreSQL must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

800-53|AC-3(4)

CCI|CCI-002165

Rule-ID|SV-214067r961317_rule

STIG-ID|PGS9-00-002200

STIG-Legacy|SV-87535

STIG-Legacy|V-72883

Vuln-ID|V-214067

PGS9-00-002300 - The audit information produced by PostgreSQL must be protected from unauthorized deletion - log directory

CCI|CCI-000164

Rule-ID|SV-214068r960936_rule

STIG-ID|PGS9-00-002300

STIG-Legacy|SV-87537

STIG-Legacy|V-72885

Vuln-ID|V-214068

PGS9-00-002300 - The audit information produced by PostgreSQL must be protected from unauthorized deletion - log files

PGS9-00-002300 - The audit information produced by PostgreSQL must be protected from unauthorized deletion - log_file_mode

PGS9-00-002500 - PostgreSQL must reveal detailed error messages only to the ISSO, ISSM, SA and DBA.

800-53|SI-11b.

CCI|CCI-001314

Rule-ID|SV-214070r961170_rule

STIG-ID|PGS9-00-002500

STIG-Legacy|SV-87541

STIG-Legacy|V-72889

Vuln-ID|V-214070

PGS9-00-002600 - PostgreSQL must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.

800-53|AU-12b.

CCI|CCI-000171

Rule-ID|SV-214071r960882_rule

STIG-ID|PGS9-00-002600

STIG-Legacy|SV-87543

STIG-Legacy|V-72891

Vuln-ID|V-214071

PGS9-00-003000 - PostgreSQL must maintain the confidentiality and integrity of information during reception.

800-53|SC-8(2)

CCI|CCI-002422

Rule-ID|SV-214073r961641_rule

STIG-ID|PGS9-00-003000

STIG-Legacy|SV-87547

STIG-Legacy|V-72895

Vuln-ID|V-214073

PGS9-00-003100 - Database objects (including but not limited to tables, indexes, storage, trigger procedures, functions, links to software external to PostgreSQL, etc.) must be owned by database/DBMS principals authorized for ownership.

Rule-ID|SV-214074r960960_rule

STIG-ID|PGS9-00-003100

STIG-Legacy|SV-87549

STIG-Legacy|V-72897

Vuln-ID|V-214074

PGS9-00-003300 - Database software, including PostgreSQL configuration files, must be stored in dedicated directories separate from the host OS and other applications.

Rule-ID|SV-214076r960960_rule

STIG-ID|PGS9-00-003300

STIG-Legacy|SV-87553

STIG-Legacy|V-72901

Vuln-ID|V-214076

PGS9-00-004000 - PostgreSQL must isolate security functions from non-security functions.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-214081r961131_rule

STIG-ID|PGS9-00-004000

STIG-Legacy|SV-87563

STIG-Legacy|V-72911

Vuln-ID|V-214081

PGS9-00-004200 - The audit information produced by PostgreSQL must be protected from unauthorized read access - log directory

CCI|CCI-000162

Rule-ID|SV-214083r960930_rule

STIG-ID|PGS9-00-004200

STIG-Legacy|SV-87567

STIG-Legacy|V-72915

Vuln-ID|V-214083

PGS9-00-004200 - The audit information produced by PostgreSQL must be protected from unauthorized read access - log files

PGS9-00-004200 - The audit information produced by PostgreSQL must be protected from unauthorized read access - log_file_mode

PGS9-00-004300 - When updates are applied to PostgreSQL software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-214084r961677_rule

STIG-ID|PGS9-00-004300

STIG-Legacy|SV-87569

STIG-Legacy|V-72917

Vuln-ID|V-214084

PGS9-00-007000 - PostgreSQL, when utilizing PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-214111r961038_rule

STIG-ID|PGS9-00-007000

STIG-Legacy|SV-87631

STIG-Legacy|V-72979

Vuln-ID|V-214111

PGS9-00-007200 - PostgreSQL must maintain the confidentiality and integrity of information during preparation for transmission.

CCI|CCI-002420

Rule-ID|SV-214113r961638_rule

STIG-ID|PGS9-00-007200

STIG-Legacy|SV-87633

STIG-Legacy|V-72981

Vuln-ID|V-214113

PGS9-00-008000 - PostgreSQL must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to generate and validate cryptographic hashes.

800-53|SC-13

CCI|CCI-002450

Rule-ID|SV-214117r961857_rule

STIG-ID|PGS9-00-008000

STIG-Legacy|SV-87641

STIG-Legacy|V-72989

Vuln-ID|V-214117

PGS9-00-008200 - PostgreSQL must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the data owners requirements.

Rule-ID|SV-214119r961857_rule

STIG-ID|PGS9-00-008200

STIG-Legacy|SV-87645

STIG-Legacy|V-72993

Vuln-ID|V-214119

PGS9-00-008400 - PostgreSQL must prohibit user installation of logic modules (functions, trigger procedures, views, etc.) without explicit privileged status.

800-53|CM-11(2)

CCI|CCI-001812

Rule-ID|SV-214121r981956_rule

STIG-ID|PGS9-00-008400

STIG-Legacy|SV-87649

Detections

Analytics

DISA STIG PostgreSQL 9.x on RHEL OS v2r5

Audit Details

File Details

Audit Changelog

No revisions found