V-233580
Crunchy Data PostgreSQL Security Technical Implementation Guide
Title
PostgreSQL must be configured to provide audit record generation for DoD-defined auditable events within all DBMS/database components.
Description
<VulnDiscussion>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within PostgreSQL (e.g., process, module). Certain specific application functionalities may be audited as well. The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset o...
Fix Text (Documentation Requirement)
Configure PostgreSQL to generate audit records for at least the DoD minimum set of events. Using "pgaudit", PostgreSQL can be configured to audit these requests. See supplementary content APPENDIX-B for documentation on installing pgaudit. To ensure that logging is enabled, review supplementary content APPENDIX-C for instructions on enabling logging.