TMA-POSTGRES-5.6
Ensure Password Complexity is configured
Deskripsi
Password complexity configuration is crucial to restrict unauthorized access to data. By default, PostgreSQL doesn't provide for password complexity. Moreover, many compliance frameworks such as PCI DSS, and HIPPA require both password complexity and length.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Run SHOW shared_preload_libraries; and SHOW dynamic_library_path; If $libdir/passwordcheck (or passwordcheck when dynamic_library_path is $libdir) is not listed in shared_preload_libraries, this is a failure.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Add '$libdir/passwordcheck' to shared_preload_libraries in postgresql.conf (keep existing entries), optionally set passwordcheck.min_password_length, and restart PostgreSQL.
Properti
- Sistem operasi
- Apa saja
- Tag
- postgresdatabaseauthenticationpasswordmanual
- Referensi
- CIS PostgreSQL 18 Benchmark v1.0.0 - 5.6 Ensure Password Complexity is configured