VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide

The VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide (V1 R2) has 22 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

22STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Jul 26 2023

VMware Postgres must set client-side character encoding to UTF-8.

VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide

Assessment Title

Rule Text

VMware Postgres must set client-side character encoding to UTF-8.

Description

Discussion Text

A common vulnerability is unplanned behavior when invalid inputs are received. This requirement guards against adverse or unintended system behavior caused by invalid inputs, where information system responses to the invalid input may be disruptive or cause the system to fail to an unsafe state.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239216

Rule

SV-239216r879818_rule

Severity

medium

Rule Version

VCPG-67-000024

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At the command prompt, execute the following command:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SHOW client_encoding;"|sed -n 3p|sed -e 's/^[ ]*//'

Expected result:

UTF8

If the output does not match the expected result, this is a finding.

Implementation Procedure

Fix Text

At the command prompt, execute the following commands:

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "ALTER SYSTEM SET client_encoding TO 'UTF8';"

# /opt/vmware/vpostgres/current/bin/psql -U postgres -c "SELECT pg_reload_conf();"

STIG check 20 of 22 in the VMware vSphere 6.7 PostgreSQL STIG checklist

← Previous · V-239215VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.Next · V-257281 →The version of PostgreSQL running on the system must be a supported version.