STIGQter STIGQter: STIG Summary:

VMware vSphere 7.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide

Version: 1

Release: 2 Benchmark Date: 26 Jul 2023

CheckedNameTitle
SV-256591r887559_ruleVMware Postgres must limit the number of connections.
SV-256592r887562_ruleVMware Postgres log files must contain required fields.
SV-256593r887565_ruleVMware Postgres configuration files must not be accessible by unauthorized users.
SV-256594r887568_ruleVMware Postgres must be configured to overwrite older logs when necessary.
SV-256595r887571_ruleThe VMware Postgres database must protect log files from unauthorized access and modification.
SV-256596r918971_ruleAll vCenter database (VCDB) tables must be owned by the "vc" user account.
SV-256597r887577_ruleVMware Postgres must limit modify privileges to authorized accounts.
SV-256598r887580_ruleVMware Postgres must be configured to use the correct port.
SV-256599r887583_ruleVMware Postgres must require authentication on all connections.
SV-256600r887586_ruleThe vPostgres database must use "md5" for authentication.
SV-256601r887589_ruleVMware Postgres must be configured to use Transport Layer Security (TLS).
SV-256602r887592_ruleVMware Postgres must enforce authorized access to all public key infrastructure (PKI) private keys.
SV-256603r887595_ruleVMware Postgres must use FIPS 140-2 approved Transport Layer Security (TLS) ciphers.
SV-256604r887598_ruleVMware Postgres must write log entries to disk prior to returning operation success or failure.
SV-256605r887601_ruleVMware Postgres must not allow schema access to unauthorized accounts.
SV-256606r887604_ruleVMware Postgres must provide nonprivileged users with minimal error information.
SV-256607r887607_ruleVMware Postgres must have log collection enabled.
SV-256608r887610_ruleVMware Postgres must be configured to log to "stderr".
SV-256609r887613_rule"Rsyslog" must be configured to monitor VMware Postgres logs.
SV-256610r887616_ruleVMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.