PostgreSQL
TMA-POSTGRES-6.1
Understanding attack vectors and runtime parameters
LowLevel 1Manual reviewpostgres
Description
Understanding the vulnerability of PostgreSQL runtime parameters by the particular delivery method, or attack vector.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Review all configuration settings (SELECT name, setting, source, context FROM pg_settings ORDER BY context, name;) and the files postgresql.conf, postgresql.auto.conf and pg_hba.conf, and confirm logging records all modifications and changes to the RDBMS.
How it is fixed
Fix method: Guidance or infrastructure patch
Keep configuration files under change control, restrict who can write them (postgres only), and enable logging/auditing (3.1.x, 3.2) so parameter changes are recorded.
Properties
- Operating systems
- Any
- Tags
- postgresdatabaseconfigurationmanual
- Reference
- CIS PostgreSQL 18 Benchmark v1.0.0 - 6.1 Understanding attack vectors and runtime parameters