Detections
Analytics

7.4 Ensure WAL archiving is configured and functional

Information

Write Ahead Log (WAL) Archiving, or Log Shipping, is the process of sending transaction log files from the PRIMARY host either to one or more STANDBY hosts or to be archived on a remote storage device for later use, e.g. PITR . There are several utilities that can copy WALs including, but not limited to, cp, scp, sftp, and rynsc . Basically, the server follows a set of runtime parameters which define when the WAL should be copied using one of the aforementioned utilities.

Unless the server has been correctly configured, one runs the risk of sending WALs in an unsecured, unencrypted fashion.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Change parameters and restart the server as required.

See Also

https://workbench.cisecurity.org/benchmarks/24868

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|IA-5, 800-53|IA-5(1), 800-53|SC-8, 800-53|SC-8(1), CSCv7|14.4

Plugin: PostgreSQLDB

Control ID: 7ab3a1b6ceb788414d8ca13f8421b78d7f26bafefc5718f32cef1fc643c76607