Ensure PostgreSQL subdirectory locations are outside the data cluster

낮음레벨 1수동 검토postgres

설명

The PostgreSQL cluster is organized to carry out specific tasks in subdirectories. For the purposes of performance, reliability, and security some of these subdirectories should be relocated outside the data cluster.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run SELECT name, setting FROM pg_settings WHERE name ~ '_directory$' OR name ~ '_tablespace'; and inspect the returned paths: log/stats/temp/tablespace locations should be outside the data cluster and only superusers and authorized users may access them.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Relocate log_directory, tablespaces and other subdirectories outside PGDATA, owned by postgres with mode 0700, and update postgresql.conf accordingly.

속성

운영 체제: 모두
태그: postgresdatabasefilesystemmanual
참고 자료: CIS PostgreSQL 18 Benchmark v1.0.0 - 8.1 Ensure PostgreSQL subdirectory locations are outside the data cluster