STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

VMware Postgres must be configured to overwrite older logs when necessary.

DISA Rule

SV-256594r887568_rule

Vulnerability Number

V-256594

Group Title

SRG-APP-000109-DB-000321

Rule Version

VCPG-70-000004

Severity

CAT II

CCI(s)

• CCI-000140 - Take organization-defined actions upon audit failure include, shutting down the system, overwriting oldest audit records, and stopping the generation of audit records.

Weight

10

Fix Recommendation

At the command prompt, run the following commands:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "ALTER SYSTEM SET log_truncate_on_rotation TO 'on';"

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SELECT pg_reload_conf();"

Check Contents

At the command prompt, run the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -A -t -c "SHOW log_truncate_on_rotation;"

Expected result:

on

If the output does not match the expected result, this is a finding.

Vulnerability Number

V-256594

Documentable

False

Rule Version

VCPG-70-000004

Severity Override Guidance

At the command prompt, run the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -A -t -c "SHOW log_truncate_on_rotation;"

Expected result:

on

If the output does not match the expected result, this is a finding.

Check Content Reference

M

Target Key

5521