V-261861
Crunchy Data Postgres 16 Security Technical Implementation Guide
Title
PostgreSQL must provide audit record generation capability for DOD-defined auditable events within all DBMS/database components.
Description
<VulnDiscussion>Without the capability to generate audit records, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. Audit records can be generated from various components within PostgreSQL (e.g., process, module). Certain specific application functionalities may be audited as well. The list of audited events is the set of events for which audits are to be generated. This set of events is typically a subset of...
Fix Text (Documentation Requirement)
Configure PostgreSQL to generate audit records for at least the DOD minimum set of events. Using "pgaudit", PostgreSQL can be configured to audit these requests. Refer to supplementary content APPENDIX-B for documentation on installing pgaudit. To ensure logging is enabled, see the instructions in the supplementary content APPENDIX-C.