TMA-POSTGRES-3.1.18
Ensure 'debug_print_plan' is disabled
DüşükDüzey 1Otomatikpostgres
Açıklama
The debug_print_plan setting enables printing the execution plan for each executed query. These messages are emitted at the LOG message level. Unless directed otherwise by your organization's logging policy, it is recommended this setting be disabled by setting it to off. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.
Nasıl denetlenir
Denetim yöntemi: SQL sorgusu
sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW debug_print_plan" 2>/dev/null) || exit 1; printf '%s\n' "$out"- Beklenen çıktı
off
Nasıl düzeltilir
Düzeltme yöntemi: SQL ifadesi
shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET debug_print_plan = 'off'" -c "SELECT pg_reload_conf()"Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- postgresdatabaselogging
- Referans
- CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.18 Ensure 'debug_print_plan' is disabled
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
shell
tmaegis scan --target postgres