GaussDB Kernel: Configuring the Maximum Capacity of an Audit Log File

The parameter auditrotationsize specifies the maximum capacity of an audit log file. When the size of an audit log file reaches the specified value, another audit log file is automatically created. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a reference...

GaussDB Kernel: Disabling System Catalog Structure Modification

allowsystemtablemods allows for system catalog structure modification. This parameter collaborates with GaussDB Kernel to help recover a severely damaged database in some cases. You are advised not to use this parameter in production Databases. Copyright C 2020 Greenbone Networks GmbH Some text...

GaussDB Kernel: Ensuring the Existence of the Socket File

Some application programs may search for the socket file in the /tmp directory to deceive the server. During the system startup, the socket file /tmp/ $ USER mppdb/.s.PGSQL. $PGPORT is created by default to prevent some applications from creating or overwriting the socket file in the /tmp...

GaussDB Kernel: Configuring the Client Log Message Level

The parameter clientminmessages specifies the level of messages to be sent to the client. The valid values include DEBUG5, DEBUG4, DEBUG3, DEBUG2, DEBUG1, LOG, NOTICE, WARNING, ERROR, FATAL, and PANIC. It must be NOTICE at least. After a level is selected, messages at this level and its lower...

GaussDB Kernel: Configuring Rsyslog for Unified Audit Logs

By default, unified audit logs are output to the Rsyslog on each CN. User root is authorized to configure and view the logs. Ensure that enablesecuritypolicy is Enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright...

GaussDB Kernel: Deleting the Default Username

You are advised not to use a well-known username, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

GaussDB Kernel: PUBLIC Role Should Not Have Permissions on All Objects

All users are attached to the PUBLIC role. Therefore, this role should have the fewest permissions for database security purposes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

GaussDB Kernel: Authentication Parameters

Set login parameters for scanning GaussDB Kernel database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

openGauss: Configuring the Number of Days Before Which a Password Cannot Be Reused

You are advised to configure the number of days before which a password cannot be reused. This protects a password from being cracked due to repeated usage. After the parameter passwordreusetime is set, a password can be reused only after the number of days specified by the parameter. Copyright C...

Huawei GaussDB Kernel Detection Consolidation

Consolidation of Huawei GaussDB Kernel detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei GaussDB Kernel Detection (Linux/Unix SSH Login)

SSH login-based detection of Huawei GaussDB Kernel. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GaussDB: Restricting the Permission for the SSL Private Key

If SSL is used, you need to configure the SSL certificate on the database server. You are advised to set the permission for the private key file to owner-readable-only. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

GaussDB: Changing the Password of the Initial User

The initial user SYS is a system administrator and has all system permissions. For database security, change the password of SYS as soon as possible after the database is installed. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

GaussDB: Authentication Parameters

The default administrator of GaussDB 100 is SYS and its default password is Changeme123. To ensure information security, change the password of SYS as soon as possible. Enter credentials for using different user, password, ip or port for GaussDB Policy Controls. Enter values for GSDBHOME and...

GaussDB: Removing the Remote Login Permission from the Database OS Account

The database OS account has the permission to access all database files. Once the password of this account is disclosed, the database is threatened. Removing the remote permission from this account improves database security. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might ...

GaussDB: Configure the Maximum Number of Files that Can Be Opened in Processes

If the maximum number of files that can be opened in processes is too small, SQL operations will fail once the maximum number is exceeded. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

GaussDB: Enable DML Audit

If AUDITLEVEL is set to 4, Data Manipulation Language DML operations, such as INSERT, UPDATE, DELETE, and SELECT are audited. DML is used to manage table data. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

GaussDB: Enable PL Audit

If the audit level is set to 8, the parsing and execution of stored procedures are audited, for example, EXECUTE EXEC and CALL. In addition, the definitions of anonymous blocks in stored procedures are audited. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...

GaussDB: Enable DDL Audit

If AUDITLEVEL is set to 1, only Data Definition Language DDL operations such as CREATE, DROP, and ALTER are audited. DDL is used to define or modify database objects, such as tables, indexes, views, synonyms, databases, sequences, users, roles, tablespaces, profiles, and sessions. In addition,...

ZSQL: SSL Status

To ensure transmission security of sensitive data on the Internet, you can use SSL to encrypt the communication between GaussDB 100 servers and clients. Note: This script checks the HAVESSL parameter in DVPARAMETERS table. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...