PostgreSQL
TMA-POSTGRES-6.6
Ensure 'User' Runtime Parameters are Configured
LowLevel 1Manual reviewpostgres
Description
These PostgreSQL runtime parameters are managed at the user account (ROLE) level.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Run SELECT name, setting FROM pg_settings WHERE context = 'user' ORDER BY 1; and inspect role and database overrides (SELECT * FROM pg_db_role_setting; \drds). Any value that differs from your approved baseline is a fail.
How it is fixed
Fix method: Guidance or infrastructure patch
Reset unauthorized overrides with ALTER ROLE <role> [IN DATABASE <db>] RESET <parameter>; or ALTER DATABASE <db> RESET <parameter>; and correct the configuration files.
Properties
- Operating systems
- Any
- Tags
- postgresdatabaseconfigurationmanual
- Reference
- CIS PostgreSQL 18 Benchmark v1.0.0 - 6.6 Ensure 'User' Runtime Parameters are Configured