STIGQter STIGQter: STIG Summary:

VMware vSphere 8.0 vCenter Appliance PostgreSQL Security Technical Implementation Guide

Version: 1

Release: 1 Benchmark Date: 31 Oct 2023

CheckedNameTitle
SV-259166r935402_ruleThe vCenter PostgreSQL service must limit the number of concurrent sessions.
SV-259167r935405_ruleThe vCenter PostgreSQL service must enable "pgaudit" to provide audit record generation capabilities.
SV-259168r935408_ruleThe vCenter PostgreSQL service configuration files must not be accessible by unauthorized users.
SV-259169r935411_ruleThe vCenter PostgreSQL service must generate audit records.
SV-259170r935414_ruleThe vCenter PostgreSQL service must initiate session auditing upon startup.
SV-259171r935417_ruleThe vCenter PostgreSQL service must produce logs containing sufficient information to establish what type of events occurred.
SV-259172r935420_ruleThe vCenter PostgreSQL service must be configured to protect log files from unauthorized access.
SV-259173r935423_ruleThe vCenter PostgreSQL service must not load unused database components, software, and database objects.
SV-259174r935426_ruleThe vCenter PostgreSQL service must be configured to use an authorized port.
SV-259175r935429_ruleThe vCenter PostgreSQL service must require authentication on all connections.
SV-259176r935432_ruleThe vCenter PostgreSQL service must encrypt passwords for user authentication.
SV-259177r935435_ruleThe vCenter PostgreSQL service must enforce authorized access to all PKI private keys stored/utilized by PostgreSQL.
SV-259178r935438_ruleThe vCenter PostgreSQL service must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values.
SV-259179r935441_ruleThe vCenter PostgreSQL service must write log entries to disk prior to returning operation success or failure.
SV-259180r935444_ruleThe vCenter PostgreSQL service must provide nonprivileged users with minimal error information.
SV-259181r935447_ruleThe vCenter PostgreSQL service must have log collection enabled.
SV-259182r935450_ruleThe vCenter PostgreSQL service must use Coordinated Universal Time (UTC) for log timestamps.
SV-259183r935453_ruleThe vCenter PostgreSQL service must log all connection attempts.
SV-259184r935456_ruleThe vCenter PostgreSQL service must log all client disconnections.
SV-259185r935459_ruleThe vCenter PostgreSQL service must off-load audit data to a separate log management facility.