7.3 Ensure WAL archiving is configured and functional - archive_command

Information

Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY host either to one or more STANDBY hosts or to be archived on a remote storage device for later use, e.g. PITR. There are several utilities that can copy WALs including, but not limited to, cp, scp, sftp, and rynsc. Basically, the server follows a set of runtime parameters which defines when the WAL should be copied using one of the aforementioned utilities.
Rationale:
Unless the server has been correctly configured, one runs the risk of sending WALs in an unsecured, unencrypted fashion.

Solution

Change parameters and restart the server as required.
Note: SSH public keys must be generated and installed as per industry standards.

See Also

https://workbench.cisecurity.org/files/2407

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8, CSCv6|14.2, CSCv7|14.4

Plugin: Unix

Control ID: a7c6ae4200583a79359308ca440bd9204e57771195ba01d66621149b8c18b7ab