TMA-POSTGRES-3.1.22
Ensure 'log_error_verbosity' is set correctly
BajaNivel 1Automatizadapostgres
Descripción
The log_error_verbosity setting specifies the verbosity (amount of detail) of logged messages. Valid values are: ; TERSE ; DEFAULT ; VERBOSE with each containing the fields of the level above it as well as additional fields. TERSE excludes the logging of DETAIL, HINT, QUERY, and CONTEXT error information. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.
Cómo se verifica
Método de auditoría: Consulta SQL
sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW log_error_verbosity" 2>/dev/null) || exit 1; printf '%s\n' "$out"- Salida esperada
verbose
Cómo se corrige
Método de corrección: Sentencia SQL
shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET log_error_verbosity = 'verbose'" -c "SELECT pg_reload_conf()"Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- postgresdatabaselogging
- Referencia
- CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.22 Ensure 'log_error_verbosity' is set correctly
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
shell
tmaegis scan --target postgres