STIGQter: STIG Summary: EDB Postgres Advanced Server Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The EDB Postgres Advanced Server must isolate security functions from non-security functions.

DISA Rule

SV-213605r508024_rule

Vulnerability Number

V-213605

Group Title

SRG-APP-000233-DB-000124

Rule Version

PPS9-00-005800

Severity

CAT II

CCI(s)

• CCI-001084 - The information system isolates security functions from nonsecurity functions.

Weight

10

Fix Recommendation

Remove all application-specific packages that were added to the sys, pg_catalog, information_schema, and dbo schemas.

Check Contents

All PPAS built-in security packages are in the sys, pg_catalog, information_schema, and dbo schemas.

If any application-specific packages have been added to these schemas, this is a finding.

Vulnerability Number

V-213605

Documentable

False

Rule Version

PPS9-00-005800

Severity Override Guidance

All PPAS built-in security packages are in the sys, pg_catalog, information_schema, and dbo schemas.

If any application-specific packages have been added to these schemas, this is a finding.

Check Content Reference

M

Target Key

3988

Comments