V-233572
Crunchy Data PostgreSQL Security Technical Implementation Guide
Title
PostgreSQL must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.
Description
<VulnDiscussion>Without tracking privileged activity, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. System documentation should include a definition of the functionality considered privileged. A privileged function in this context is any operation that modifies the structure of the database, its built-in logic, or its security settings. This would include all Data Definition Language (DDL) statements and...
Fix Text (Documentation Requirement)
Configure PostgreSQL to produce audit records when unsuccessful attempts to execute privileged SQL. All denials are logged by default if logging is enabled. To ensure that logging is enabled, review supplementary content APPENDIX-C for instructions on enabling logging.