Detections
Analytics

5.5 Ensure per-account connection limits are used

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Limiting concurrent connections to a PostgreSQL server can be used to reduce the risk of Denial of Service (DoS) attacks.

Limiting the number of concurrent sessions at the user level helps to reduce the risk of DoS attacks.

Solution

Set a per-user connection limit by running:

ALTER USER <dbuser> CONNECTION LIMIT <reasonable concurrent connection count>;

See Also

https://workbench.cisecurity.org/benchmarks/19478

Item Details

Plugin: PostgreSQLDB

Control ID: 3bd080a065a71deb714d3efdf584910d028646bd8e0e27ec5772d5c9d160990f