Ensure the pgcrypto extension is installed and configured correctly

MediaNivel 1Revisión manualyugabytedb

Descripción

YugabyteDB must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Run SELECT * FROM pg_available_extensions WHERE name = 'pgcrypto'; and, in each database holding sensitive data, SELECT * FROM pg_extension WHERE extname = 'pgcrypto'; If data requires column encryption and pgcrypto is not installed or used, this is a finding; also confirm disk/filesystem encryption where policy requires it.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

The pgcrypto extension is included with the YugabyteDB 'contrib' package. Although included, it needs to be created in the database. As the database administrator, run the following: yugabyte=# CREATE EXTENSION pgcrypto; Verify pgcrypto is installed: yugabyte=# SELECT * FROM pg_available_extensions WHERE name='pgcrypto';

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: yugabytedbencryption
Referencia: CIS YugabyteDB Benchmark v2.0.0 - 7.4 Ensure the pgcrypto extension is installed and configured correctly