GaussDB Kernel: Enabling the Auditing of Database Login and Logout

The parameter auditloginlogout specifies whether to audit user login and logout. After this parameter is set to on, users logged in to the database and the time when they logged out are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Configuring the Permission to Access UNIX Domain Sockets

unixsocketpermissions specifies the permission to access UNIX domain sockets. The default value of this parameter is 0777, indicating that all users can access UNIX domain sockets. You are advised to set this parameter to 0770 indicating that only users and groups can access UNIX domain sockets o...

GaussDB Kernel: Restricting the Permission for the pg_hba.conf File

The configuration file pghba.conf stores the configuration information about database connections. To prevent the parameters in the file from being tampered and protect customer information from security threats, this file directory must be protected and deny unauthorized user access. Copyright C...

GaussDB Kernel: Ensuring the Existence of the Socket File

Some application programs may search for the socket file in the /tmp directory to deceive the server. During the system startup, the socket file /tmp/ $ USER mppdb/.s.PGSQL. $PGPORT is created by default to prevent some applications from creating or overwriting the socket file in the /tmp...

GaussDB Kernel: Configuring Rsyslog for Unified Audit Logs

By default, unified audit logs are output to the Rsyslog on each CN. User root is authorized to configure and view the logs. Ensure that enablesecuritypolicy is Enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

GaussDB Kernel: Configuring Kerberos Authentication in a Cluster

Use gsom to enable and disable Kerberos authentication in a cluster. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

GaussDB Kernel: Authentication Parameters

Set login parameters for scanning GaussDB Kernel database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

GaussDB Kernel: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your Permissions. Copyright C 2020 Greenbone Networks GmbH Som...

GaussDB Kernel: Configuring the Interconnection with Elastic Search

Unified audit sends audit logs to the third-party Elastic Search system for log analysis and processing. You are advised to configure the interconnection with Elastic Search. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

GaussDB Kernel: Enabling the Logging of User Logout

Similar to logconnections, a record containing a session duration is added to the server log at the end of the session. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Configuring the WAL Information Recording Level

The parameter wallevel specifies the level of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

GaussDB Kernel: Configuring the Upper Limit of Failed Login Attempts

You are advised to set the upper limit of failed login attempts to protect passwords from brute-force attacks. After the parameter failedloginattempts is set, an account will be automatically locked if the number of its failed login attempts exceeds the parameter value. Copyright C 2020 Greenbone...

GaussDB Kernel: Disabling the Logging of the Host Name

By default, the connection log message displays only the IP address of the connected host. If loghostname is set to on, the host name is also recorded. It may take some time to parse the host name and affect database performance. Copyright C 2020 Greenbone Networks GmbH Some text descriptions mig...

GaussDB Kernel: Restricting the Permission for the Data Directory

The data directory stores user data files. To prevent them from being tampered or damaged and protect customer data from security threats, this directory must be protected and deny unauthorized user access. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

GaussDB Kernel: Deleting the Default Username

You are advised not to use a well-known username, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

GaussDB Kernel: Configuring the Level of Error-Deriving SQL Statements to Be Logged

The logminerrorstatement parameter specifies which level of SQL statements that cause an error will be recorded into server logs. SQL statements whose levels are higher than or equal to the configured level will be recorded into server logs. The valid values include DEBUG5, DEBUG4, DEBUG3, DEBUG2...

GaussDB Kernel: Disabling Log Overwriting

The parameter logtruncateonrotation specifies whether GaussDB Kernel deletes or overwrites rather than append the existing log file with the same Name. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

GaussDB Kernel: Configuring the Levels of Logs to Be Written into the Server

The parameter logerrorverbosity specifies the level of logs to be written into the server. The value can be TERSE, DEFAULT, or VERBOSE. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Configuring Log File Permissions

After loggingcollector is set to on, you can set logfilemode to specify server log file permissions. Access to log files must be restricted, because the log files may contain sensitive data. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

GaussDB Kernel: Configuring the Automatic Account Unlocking Time

Configure the automatic account unlocking time for locked abnormal accounts. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...