Ensure Password Complexity is configured

보통레벨 1수동 검토postgres

설명

Password complexity configuration is crucial to restrict unauthorized access to data. By default, PostgreSQL doesn't provide for password complexity. Moreover, many compliance frameworks such as PCI DSS, and HIPPA require both password complexity and length.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run SHOW shared_preload_libraries; and SHOW dynamic_library_path; If $libdir/passwordcheck (or passwordcheck when dynamic_library_path is $libdir) is not listed in shared_preload_libraries, this is a failure.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Add '$libdir/passwordcheck' to shared_preload_libraries in postgresql.conf (keep existing entries), optionally set passwordcheck.min_password_length, and restart PostgreSQL.

속성

운영 체제: 모두
태그: postgresdatabaseauthenticationpasswordmanual
참고 자료: CIS PostgreSQL 18 Benchmark v1.0.0 - 5.6 Ensure Password Complexity is configured