PostgreSQL
TMA-POSTGRES-3.1.22
Ensure 'log_error_verbosity' is set correctly
낮음레벨 1자동postgres
설명
The log_error_verbosity setting specifies the verbosity (amount of detail) of logged messages. Valid values are: ; TERSE ; DEFAULT ; VERBOSE with each containing the fields of the level above it as well as additional fields. TERSE excludes the logging of DETAIL, HINT, QUERY, and CONTEXT error information. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.
점검 방법
감사 방식: SQL 쿼리
sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW log_error_verbosity" 2>/dev/null) || exit 1; printf '%s\n' "$out"- 예상 출력
verbose
조치 방법
조치 방식: SQL 문
shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET log_error_verbosity = 'verbose'" -c "SELECT pg_reload_conf()"속성
- 운영 체제
- 모두
- 태그
- postgresdatabaselogging
- 참고 자료
- CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.22 Ensure 'log_error_verbosity' is set correctly
이 호스트 점검하기
감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.
shell
tmaegis scan --target postgres