V-261959
Crunchy Data Postgres 16 Security Technical Implementation Guide
Title
PostgreSQL must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.
Description
<VulnDiscussion>Without tracking privileged activity, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. System documentation should include a definition of the functionality considered privileged. A privileged function in this context is any operation that modifies the structure of the database, its built-in logic, or its security settings. This would include all Data Definition Language (DDL) statements and...
Fix Text (Documentation Requirement)
Configure PostgreSQL to produce audit records when unsuccessful attempts to execute privileged SQL. All denials are logged by default if logging is enabled. To ensure logging is enabled, see the instructions in the supplementary content APPENDIX-C.