openGauss: Restricting the Permission for the pg_hba.conf File

The configuration file pghba.conf stores the configuration information about database connections. To prevent the parameters in the file from being tampered and protect customer information from security threats, this file directory must be protected and deny unauthorized user access. Copyright C...

openGauss: Restricting the Permission for the ${GAUSSHOME}/share Directory

The $GAUSSHOME /share directory stores the shared components of openGauss. To prevent them from being tampered or damaged, the directory must be protected and deny unauthorized user access. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...

openGauss: Ensuring the Existence of the server.crt File

The best solution to prevent TCP server spoofing is to use the SSL certificate and ensure that the server certificate is verified on the client. Therefore, the server must be configured to use only the hostssl connection, and the server.key key and server.crt certificate files using the SSL must ...

openGauss: Authentication Parameters

Set login parameters for scanning openGauss database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openGauss: Enabling the Log Collector

The parameter loggingcollector specifies whether the log collector is enabled. The log collection process captures log messages sent to stderr or csvlog and writes them to log files, avoiding data loss during Syslog logging. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

openGauss: Setting the Number of Connections Used by System Administrators

sysadminreservedconnections indicates the minimum number of connections reserved for the openGauss system administrator. The value of this parameter must be less than that of maxconnections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Setting database for host Entries in the pg_hba.conf File

If database is set to all for host entries, connected users are allowed to access any database. You are advised to set database for host entries to the database to be Connected. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

openGauss: Configure an Audit Priority Policy

Configures the policy for determining whether audit logs are preferentially stored by space or time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

openGauss: Checking the CREATEROLE Permission

Only the role with the CREATEROLE permission can create, modify, or delete other roles. Such a role can also grant permissions to or revoke permissions of other roles. To avoid arbitrary permission granting, delete roles that do not require the CREATEROLE permission. Copyright C 2020 Greenbone...

openGauss: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking such a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your permissions. Copyright C 2020 Greenbone Networks Gmb...

openGauss: Configuring the Automatic Account Unlocking Time

Configure the automatic account unlocking time for locked abnormal accounts. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

openGauss: Deleting the Default User Name

You are advised not to use a well-known user name, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

openGauss: Prohibiting host Entries (Except Intra-openGauss Nodes) from Using Trust Authentication in the pg_hba.conf File

openGauss nodes are deployed on the secure intranet. Only the communications between intra-openGauss nodes are allowed to use trust authentication. Trust authentication assumes that all users who can connect to the openGauss server nodes can access the database. This method is applied only when a...

openGauss: Configuring the Number of Connections to a Role

The number of connections to a role must be limited. If rolconnlimit is set to -1, the number of concurrent connections is unlimited. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Configuring the WAL Information Recording Level

The parameter wallevel specifies the level of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

openGauss: Configuring the Minimum Audit Log File Retention Period

The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

openGauss: Disabling System Catalog Structure Modification

allowsystemtablemods allows for system catalog structure modification. This parameter collaborates with openGauss to help recover a severely damaged database in some cases. You are advised not to use this parameter in production Databases. Copyright C 2020 Greenbone Networks GmbH Some text...

openGauss: Configuring Log File Permissions

After loggingcollector is set to on, you can set logfilemode to specify server log file permissions. Access to log files must be restricted, because the log files may contain sensitive data. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Disabling the Logging of the Host Name

By default, the connection log message displays only the IP address of the connected host. If loghostname is set to on, the host name is also recorded. It may take some time to parse the host name and affect database performance. Copyright C 2020 Greenbone Networks GmbH Some text descriptions mig...

openGauss: Enabling the Auditing of the Query of Database Objects

The parameter auditdmlstateselect specifies whether to audit the SELECT operation on database objects. After this parameter is set to on, the SELECT operation on database objects is traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...