Ensure the pgcrypto extension is installed and configured correctly

SrednjaNivo 1Ručni pregledyugabytedb

Opis

YugabyteDB must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run SELECT * FROM pg_available_extensions WHERE name = 'pgcrypto'; and, in each database holding sensitive data, SELECT * FROM pg_extension WHERE extname = 'pgcrypto'; If data requires column encryption and pgcrypto is not installed or used, this is a finding; also confirm disk/filesystem encryption where policy requires it.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

The pgcrypto extension is included with the YugabyteDB 'contrib' package. Although included, it needs to be created in the database. As the database administrator, run the following: yugabyte=# CREATE EXTENSION pgcrypto; Verify pgcrypto is installed: yugabyte=# SELECT * FROM pg_available_extensions WHERE name='pgcrypto';

Svojstva

Operativni sistemi: Bilo koji
Oznake: yugabytedbencryption
Referenca: CIS YugabyteDB Benchmark v2.0.0 - 7.4 Ensure the pgcrypto extension is installed and configured correctly