PostgreSQL
TMA-POSTGRES-8.1
Ensure PostgreSQL subdirectory locations are outside the data cluster
RendahLevel 1Tinjauan manualpostgres
Deskripsi
The PostgreSQL cluster is organized to carry out specific tasks in subdirectories. For the purposes of performance, reliability, and security some of these subdirectories should be relocated outside the data cluster.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Run SELECT name, setting FROM pg_settings WHERE name ~ '_directory$' OR name ~ '_tablespace'; and inspect the returned paths: log/stats/temp/tablespace locations should be outside the data cluster and only superusers and authorized users may access them.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Relocate log_directory, tablespaces and other subdirectories outside PGDATA, owned by postgres with mode 0700, and update postgresql.conf accordingly.
Properti
- Sistem operasi
- Apa saja
- Tag
- postgresdatabasefilesystemmanual
- Referensi
- CIS PostgreSQL 18 Benchmark v1.0.0 - 8.1 Ensure PostgreSQL subdirectory locations are outside the data cluster