GaussDB: Enable PL Audit

# SPDX-FileCopyrightText: 2020 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.150275");
  script_version("2023-07-27T05:05:09+0000");
  script_tag(name:"last_modification", value:"2023-07-27 05:05:09 +0000 (Thu, 27 Jul 2023)");
  script_tag(name:"creation_date", value:"2020-04-16 11:08:58 +0000 (Thu, 16 Apr 2020)");
  script_tag(name:"cvss_base", value:"0.0");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:H/Au:S/C:N/I:N/A:N");
  script_tag(name:"qod", value:"97");

  script_name("GaussDB: Enable PL Audit");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2020 Greenbone AG");
  script_family("Policy");
  script_dependencies("gather-package-list.nasl", "compliance_tests.nasl");
  script_mandatory_keys("Compliance/Launch");

  script_xref(name:"URL", value:"https://support.huawei.com/enterprise/en/doc/EDOC1100098622");
  script_tag(name:"summary", value:"If the audit level is set to 8, the parsing and execution of
stored procedures are audited, for example, EXECUTE (EXEC) and CALL. In addition, the definitions of
anonymous blocks in stored procedures are audited.");

  exit(0);
}

include("policy_functions.inc");
include("ssh_func.inc");

cmd = "SELECT (SELECT value FROM DV_PARAMETERS WHERE name = 'AUDIT_LEVEL') & 8 AS PL_AUDIT;";
title = "Enable PL Audit";
solution = "ALTER SYSTEM SET AUDIT_LEVEL = 8;";
test_type = "SQL_Query";
default = "1";

if(!get_kb_item("login/SSH/success") || !sock = ssh_login_or_reuse_connection()){
  compliant = "incomplete";
  value = "error";
  comment = "No SSH connection to host";
}else if(!query_return = zsql_command(socket:sock, query:cmd)){
  compliant = "incomplete";
  value = "error";
  comment = "No result for query";
}else{
  no_newline = ereg_replace(string:query_return, pattern:"\s+", replace:",");
  match = eregmatch(string:no_newline, pattern:"-,([0-9]+),");
  if(!match){
    compliant = "incomplete";
    value = "error";
    comment = "Can not parse output of command";
  }else{
    value = match[1];
    compliant = policy_setting_min_match(value:value, set_point:default);
  }
}

policy_reporting(result:value, default:">= " + default, compliant:compliant, fixtext:solution,
  type:test_type, test:cmd, info:comment);

policy_set_kbs(type:test_type, cmd:cmd, default:default, solution:solution, title:title,
  value:value, compliant:compliant);

exit(0);