Ensure the pgcrypto extension is installed and configured correctly

보통레벨 1수동 검토yugabytedb

설명

YugabyteDB must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run SELECT * FROM pg_available_extensions WHERE name = 'pgcrypto'; and, in each database holding sensitive data, SELECT * FROM pg_extension WHERE extname = 'pgcrypto'; If data requires column encryption and pgcrypto is not installed or used, this is a finding; also confirm disk/filesystem encryption where policy requires it.

조치 방법

조치 방식: 가이드 또는 인프라 패치

The pgcrypto extension is included with the YugabyteDB 'contrib' package. Although included, it needs to be created in the database. As the database administrator, run the following: yugabyte=# CREATE EXTENSION pgcrypto; Verify pgcrypto is installed: yugabyte=# SELECT * FROM pg_available_extensions WHERE name='pgcrypto';

속성

운영 체제: 모두
태그: yugabytedbencryption
참고 자료: CIS YugabyteDB Benchmark v2.0.0 - 7.4 Ensure the pgcrypto extension is installed and configured correctly