TMAegisBeta
Više pravila za postgres

PostgreSQL

TMA-POSTGRES-3.1.23

Ensure 'log_hostname' is set correctly

NiskaNivo 1Automatskapostgres

Opis

Enabling the log_hostname setting causes the hostname of the connecting host to be logged in addition to the host's IP address for connection log messages. Disabling the setting causes only the connecting host's IP address to be logged, and not the hostname. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.

Kako se proverava

Metod provere: SQL upit

sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW log_hostname" 2>/dev/null) || exit 1; printf '%s\n' "$out"
Očekivani izlaz
off

Kako se ispravlja

Metod ispravke: SQL naredba

shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET log_hostname = 'off'" -c "SELECT pg_reload_conf()"

Svojstva

Operativni sistemi
Bilo koji
Oznake
postgresdatabaselogging
Referenca
CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.23 Ensure 'log_hostname' is set correctly

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target postgres