CIS PostgreSQL 9.5 OS v1.0.0

This audit file has been deprecated and will be removed in a future update.

Name: CIS PostgreSQL 9.5 OS v1.0.0

Updated: 3/22/2019

Authority: CIS

Plugin: Unix

Revision: 1.3

Estimated Item Count: 18

Filename: CIS_PostgreSQL_9.5_v1.0.0_L1_OS_Linux.audit

Size: 45.4 kB

MD5: d5ab950bf7699efa9b97ef58fc4166ac

SHA256: 51904431ff680db2d6996a1253666e7ad840789f9ff574160ca2d998309632fa

Description	Categories
1.1 Ensure packages are obtained from authorized repositories	SYSTEM AND INFORMATION INTEGRITY
1.2 Ensure Installation of Community Packages	SYSTEM AND INFORMATION INTEGRITY
1.3 Ensure Installation of Binary Packages	SYSTEM AND INFORMATION INTEGRITY
1.4 Ensure Service Runlevel Is Registered And Set Correctly	CONFIGURATION MANAGEMENT
1.5 Ensure Data Cluster Initialized Successfully
2.1 Ensure the file permissions mask is correct	ACCESS CONTROL
2.2 Ensure the PostgreSQL pg_wheel group membership is correct- /etc/groups	ACCESS CONTROL
2.2 Ensure the PostgreSQL pg_wheel group membership is correct- /etc/passwd	ACCESS CONTROL
4.1 Ensure sudo is configured correctly	ACCESS CONTROL
4.2 Ensure valid public keys are installed
4.3 Ensure excessive administrative privileges are revoked	ACCESS CONTROL
5.1 Ensure login via 'local' UNIX Domain Socket is configured correctly
6.1 Ensure 'Attack Vectors' Runtime Parameters are Configured
6.8 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabled	SYSTEM AND COMMUNICATIONS PROTECTION
6.8 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl version	SYSTEM AND COMMUNICATIONS PROTECTION
7.3 Ensure WAL archiving is configured and functional - archive_command	AUDIT AND ACCOUNTABILITY
7.3 Ensure WAL archiving is configured and functional - archive_mode	AUDIT AND ACCOUNTABILITY
8.3 Ensure the backup and restore tool, 'pgBackRest', is installed and configured	CONTINGENCY PLANNING