Ensure Password Complexity is configured

MoyenneNiveau 1Revue manuellepostgres

Description

Password complexity configuration is crucial to restrict unauthorized access to data. By default, PostgreSQL doesn't provide for password complexity. Moreover, many compliance frameworks such as PCI DSS, and HIPPA require both password complexity and length.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Run SHOW shared_preload_libraries; and SHOW dynamic_library_path; If $libdir/passwordcheck (or passwordcheck when dynamic_library_path is $libdir) is not listed in shared_preload_libraries, this is a failure.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Add '$libdir/passwordcheck' to shared_preload_libraries in postgresql.conf (keep existing entries), optionally set passwordcheck.min_password_length, and restart PostgreSQL.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: postgresdatabaseauthenticationpasswordmanual
Référence: CIS PostgreSQL 18 Benchmark v1.0.0 - 5.6 Ensure Password Complexity is configured