TMAegis
postgres için daha fazla kural

TMA-POSTGRES-3.1.23

Ensure 'log_hostname' is set correctly

DüşükDüzey 1Otomatikpostgres

Açıklama

Enabling the log_hostname setting causes the hostname of the connecting host to be logged in addition to the host's IP address for connection log messages. Disabling the setting causes only the connecting host's IP address to be logged, and not the hostname. Runs psql as ${PGUSER:-postgres} against ${PGDATABASE:-postgres}; set PGHOST/PGPORT and use ~/.pgpass (not PGPASSWORD, see 1.6/1.7) when peer authentication is not available.

Nasıl denetlenir

Denetim yöntemi: SQL sorgusu

sql_query
out=$(psql -X -U "${PGUSER:-postgres}" -d "${PGDATABASE:-postgres}" -tAc "SHOW log_hostname" 2>/dev/null) || exit 1; printf '%s\n' "$out"
Beklenen çıktı
off

Nasıl düzeltilir

Düzeltme yöntemi: SQL ifadesi

shell
psql -X -U "${PGUSER:-postgres}" -c "ALTER SYSTEM SET log_hostname = 'off'" -c "SELECT pg_reload_conf()"

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
postgresdatabaselogging
Referans
CIS PostgreSQL 18 Benchmark v1.0.0 - 3.1.23 Ensure 'log_hostname' is set correctly

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell
tmaegis scan --target postgres