PostgreSQL
TMA-POSTGRES-4.1
Ensure Interactive Login is Disabled
SedangLevel 1Tinjauan manualpostgres
Deskripsi
When created, the PostgreSQL user may have interactive access to the operating system, which means that the PostgreSQL user could login to the host as any other user would.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Run sudo grep postgres /etc/shadow | cut -d: -f1-2. Unless the output is postgres:!<something> (locked password), interactive login is possible and this is a fail.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Lock the account password: passwd -l postgres (and optionally set its shell to /sbin/nologin if no one uses sudo -iu postgres). Administrators then use sudo -iu postgres.
Properti
- Sistem operasi
- Apa saja
- Tag
- postgresdatabaseauthenticationosmanual
- Referensi
- CIS PostgreSQL 18 Benchmark v1.0.0 - 4.1 Ensure Interactive Login is Disabled