PostgreSQL
TMA-POSTGRES-5.6
Ensure Password Complexity is configured
СредњаНиво 1Ручни прегледpostgres
Опис
Password complexity configuration is crucial to restrict unauthorized access to data. By default, PostgreSQL doesn't provide for password complexity. Moreover, many compliance frameworks such as PCI DSS, and HIPPA require both password complexity and length.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
Run SHOW shared_preload_libraries; and SHOW dynamic_library_path; If $libdir/passwordcheck (or passwordcheck when dynamic_library_path is $libdir) is not listed in shared_preload_libraries, this is a failure.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Add '$libdir/passwordcheck' to shared_preload_libraries in postgresql.conf (keep existing entries), optionally set passwordcheck.min_password_length, and restart PostgreSQL.
Својства
- Оперативни системи
- Било који
- Ознаке
- postgresdatabaseauthenticationpasswordmanual
- Референца
- CIS PostgreSQL 18 Benchmark v1.0.0 - 5.6 Ensure Password Complexity is configured