STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

VMware Postgres must enforce authorized access to all public key infrastructure (PKI) private keys.

DISA Rule

SV-256602r887592_rule

Vulnerability Number

V-256602

Group Title

SRG-APP-000176-DB-000068

Rule Version

VCPG-70-000012

Severity

CAT I

CCI(s)

• CCI-000186 - For public key-based authentication, enforce authorized access to the corresponding private key.

Weight

10

Fix Recommendation

At the command prompt, run the following commands:

# chmod 600 /storage/db/vpostgres_ssl/server.key
# chown vpostgres:vpgmongrp /storage/db/vpostgres_ssl/server.key

Check Contents

At the command prompt, run the following command:

# stat -c "%a:%U:%G" /storage/db/vpostgres_ssl/server.key

Expected result:

600:vpostgres:vpgmongrp

If the output does not match the expected result, this is a finding.

Vulnerability Number

V-256602

Documentable

False

Rule Version

VCPG-70-000012

Severity Override Guidance

At the command prompt, run the following command:

# stat -c "%a:%U:%G" /storage/db/vpostgres_ssl/server.key

Expected result:

600:vpostgres:vpgmongrp

If the output does not match the expected result, this is a finding.

Check Content Reference

M

Target Key

5521