STIGQter: STIG Summary: EDB Postgres Advanced Server Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The EDB Postgres Advanced Server must protect against a user falsely repudiating having performed organization-defined actions.

DISA Rule

SV-213564r508024_rule

Vulnerability Number

V-213564

Group Title

SRG-APP-000080-DB-000063

Rule Version

PPS9-00-000900

Severity

CAT II

CCI(s)

• CCI-000166 - The information system protects against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

Weight

10

Fix Recommendation

Execute the following SQL as enterprisedb:

ALTER SYSTEM SET edb_audit = csv;
SELECT pg_reload_conf();

or

ALTER SYSTEM SET edb_audit = xml;
SELECT pg_reload_conf();

Check Contents

Execute the following SQL as enterprisedb:

SHOW edb_audit;

If the result is not "csv" or "xml", this is a finding.

Vulnerability Number

V-213564

Documentable

False

Rule Version

PPS9-00-000900

Severity Override Guidance

Execute the following SQL as enterprisedb:

SHOW edb_audit;

If the result is not "csv" or "xml", this is a finding.

Check Content Reference

M

Target Key

3988

Comments