CD16-00-000600 - PostgreSQL must allow only the information system security manager (ISSM), or individuals or roles appointed by the ISSM, to select which events are to be audited.

800-53|AU-12b.

CAT|II

CCI|CCI-000171

Rule-ID|SV-261862r1000591_rule

STIG-ID|CD16-00-000600

Vuln-ID|V-261862

CD16-00-002000 - The audit information produced by PostgreSQL must be protected from unauthorized read access.

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-261875r1000630_rule

STIG-ID|CD16-00-002000

Vuln-ID|V-261875

CD16-00-002100 - The audit information produced by PostgreSQL must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-261876r1000978_rule

STIG-ID|CD16-00-002100

Vuln-ID|V-261876

CD16-00-002200 - The audit information produced by PostgreSQL must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-261877r1000968_rule

STIG-ID|CD16-00-002200

Vuln-ID|V-261877

CD16-00-002300 - PostgreSQL must protect its audit features from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-261878r1000958_rule

STIG-ID|CD16-00-002300

Vuln-ID|V-261878

CD16-00-002400 - PostgreSQL must protect its audit configuration from unauthorized modification.

CCI|CCI-001494

Rule-ID|SV-261879r1000960_rule

STIG-ID|CD16-00-002400

Vuln-ID|V-261879

CD16-00-002500 - PostgreSQL must protect its audit features from unauthorized removal.

CCI|CCI-001495

Rule-ID|SV-261880r1000959_rule

STIG-ID|CD16-00-002500

Vuln-ID|V-261880

CD16-00-002600 - PostgreSQL must limit privileges to change software modules, to include stored procedures, functions and triggers, and links to software external to PostgreSQL.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-261881r1000648_rule

STIG-ID|CD16-00-002600

Vuln-ID|V-261881

CD16-00-002700 - The PostgreSQL software installation account must be restricted to authorized users.

CAT|I

Rule-ID|SV-261882r1000651_rule

STIG-ID|CD16-00-002700

Vuln-ID|V-261882

CD16-00-002800 - Database software, including PostgreSQL configuration files, must be stored in dedicated directories, or DASD pools, separate from the host OS and other applications.

Rule-ID|SV-261883r1000654_rule

STIG-ID|CD16-00-002800

Vuln-ID|V-261883

CD16-00-002900 - Database objects (including but not limited to tables, indexes, storage, stored procedures, functions, triggers, links to software external to the DBMS, etc.) must be owned by database/PostgreSQL principals authorized for ownership.

Rule-ID|SV-261884r1000657_rule

STIG-ID|CD16-00-002900

Vuln-ID|V-261884

CD16-00-003000 - The role(s)/group(s) used to modify database structure (including but not necessarily limited to tables, indexes, storage, etc.) and logic modules (stored procedures, functions, triggers, links to software external to PostgreSQL, etc.) must be restricted to authorized users.

Rule-ID|SV-261885r1000949_rule

STIG-ID|CD16-00-003000

Vuln-ID|V-261885

CD16-00-003300 - Unused database components that are integrated in PostgreSQL and cannot be uninstalled must be disabled.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-261887r1000666_rule

STIG-ID|CD16-00-003300

Vuln-ID|V-261887

CD16-00-003600 - PostgreSQL must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-261890r1051115_rule

STIG-ID|CD16-00-003600

Vuln-ID|V-261890

CD16-00-003900 - If passwords are used for authentication, PostgreSQL must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-261892r1000681_rule

STIG-ID|CD16-00-003900

Vuln-ID|V-261892

CD16-00-004000 - PostgreSQL, when using PKI-based authentication, must validate certificates by performing RFC 5280-compliant certification path validation.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-261893r1000684_rule

STIG-ID|CD16-00-004000

Vuln-ID|V-261893

CD16-00-004200 - PostgreSQL must map the PKI-authenticated identity to an associated user account.

800-53|IA-5(2)(c)

CCI|CCI-000187

Rule-ID|SV-261895r1000690_rule

STIG-ID|CD16-00-004200

Vuln-ID|V-261895

CD16-00-004400 - PostgreSQL must use NIST FIPS 140-2/140-3 validated cryptographic modules for cryptographic operations.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-261896r1193213_rule

STIG-ID|CD16-00-004400

Vuln-ID|V-261896

CD16-00-005200 - PostgreSQL must protect the confidentiality and integrity of all information at rest.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-261901r1000708_rule

STIG-ID|CD16-00-005200

Vuln-ID|V-261901

CD16-00-005400 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-261903r1137656_rule

STIG-ID|CD16-00-005400

Vuln-ID|V-261903

CD16-00-005600 - Access to database files must be limited to relevant processes and to authorized, administrative users.

Rule-ID|SV-261904r1137658_rule

STIG-ID|CD16-00-005600

Vuln-ID|V-261904

CD16-00-005700 - PostgreSQL must check the validity of all data inputs except those specifically identified by the organization.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-261905r1000720_rule

STIG-ID|CD16-00-005700

Vuln-ID|V-261905

CD16-00-005800 - PostgreSQL and associated applications must reserve the use of dynamic code execution for situations that require it.

Rule-ID|SV-261906r1000979_rule

STIG-ID|CD16-00-005800

Vuln-ID|V-261906

CD16-00-007300 - PostgreSQL must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-261919r1000762_rule

STIG-ID|CD16-00-007300

Vuln-ID|V-261919

CD16-00-007400 - PostgreSQL must provide an immediate real-time alert to appropriate support staff of all audit log failures.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-261920r1000973_rule

STIG-ID|CD16-00-007400

Vuln-ID|V-261920

CD16-00-008100 - PostgreSQL must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.

800-53|IA-11

CCI|CCI-002038

Rule-ID|SV-261927r1050788_rule

STIG-ID|CD16-00-008100

Vuln-ID|V-261927

CD16-00-009100 - When updates are applied to the PostgreSQL software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-261935r1000810_rule

STIG-ID|CD16-00-009100

Vuln-ID|V-261935

CD16-00-009500 - PostgreSQL must generate audit records when unsuccessful attempts to access security objects occur.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-261939r1000822_rule

STIG-ID|CD16-00-009500

Vuln-ID|V-261939

DISA_STIG_Crunchy_Data_Postgres_16_v1r3_Unix.audit from DISA Crunchy Data Postgres 16 STIG v1r3

Detections

Analytics

DISA Crunchy Data Postgres 16 STIG v1r3 Unix

Audit Details

File Details

Audit Changelog

No revisions found