1.4 Ensure Service Runlevel Is Registered And Set Correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Confirm, and set if necessary, the PostgreSQL runlevel on system-V operating systems.
Rationale:
Setting the runlevel on a System V OS ensures the database service is active especially when a change of state occurs as in the case of a system startup, reboot or an explicit change of runlevel by the sys-admin.

Solution

Irrespective of package source, PostgreSQL services can be identified because it typically includes the text string "postgresql". Correct installs automatically register the service although it may still be off. Multiple instance of postgres services often distinguish themselves using a version number. Unregistered services must be added before its runlevel can be administrated.
$ chkconfig --add postgresql-9.5

$ chkconfig --level 3 postgresql-9.5 on

$ chkconfig --list | grep postgres
postgresql-9.5 0:off 1:off 2:off 3:on 4:off 5:off 6:off

See Also

https://workbench.cisecurity.org/files/2063

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv6|3.1

Plugin: Unix

Control ID: d851e3327fc521a303abee9042bab7b2b6654f04fd3c5a2e07be32edc81c825d