STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.

DISA Rule

SV-256610r887616_rule

Vulnerability Number

V-256610

Group Title

SRG-APP-000374-DB-000322

Rule Version

VCPG-70-000020

Severity

CAT II

CCI(s)

• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.

Weight

10

Fix Recommendation

At the command prompt, run the following commands:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "ALTER SYSTEM SET log_timezone TO 'Etc/UTC';"

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SELECT pg_reload_conf();"

Check Contents

At the command prompt, run the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -A -t -c "SHOW log_timezone;"

Expected result:

Etc/UTC

If the output does not match the expected result, this is a finding.

Vulnerability Number

V-256610

Documentable

False

Rule Version

VCPG-70-000020

Severity Override Guidance

At the command prompt, run the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -A -t -c "SHOW log_timezone;"

Expected result:

Etc/UTC

If the output does not match the expected result, this is a finding.

Check Content Reference

M

Target Key

5521