VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide

The VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide (V1 R2) has 22 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

22STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Jul 26 2023

VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.

VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide

Assessment Title

Rule Text

VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.

Description

Discussion Text

If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by VMware Postgres must include date and time expressed in UTC, a modern continuation of Greenwich Mean Time (GMT).

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239215

Rule

SV-239215r879747_rule

Severity

medium

Rule Version

VCPG-67-000023

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SHOW log_timezone;"|sed -n 3p|sed -e 's/^[ ]*//'

Expected result:

Etc/UTC

If the output does not match the expected result, this is a finding.

Implementation Procedure

Fix Text

At the command prompt, execute the following commands:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "ALTER SYSTEM SET log_timezone TO 'Etc/UTC';"

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SELECT pg_reload_conf();"

STIG check 19 of 22 in the VMware vSphere 6.7 PostgreSQL STIG checklist

← Previous · V-239214Rsyslog must be configured to monitor VMware Postgres logs.Next · V-239216 →VMware Postgres must set client-side character encoding to UTF-8.