openGauss: Enabling the Auditing of the Query of Database Objects

The parameter auditdmlstateselect specifies whether to audit the SELECT operation on database objects. After this parameter is set to on, the SELECT operation on database objects is traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...

openGauss: Configure an Audit Priority Policy

Configures the policy for determining whether audit logs are preferentially stored by space or time. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

openGauss: Enabling the Archiving Mode

The parameter wallevel specifies the amount of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

openGauss: Configuring Node Connections in the pg_hba.conf File of the Database Node in openGauss

openGauss nodes are deployed on the secure intranet. Database nodes cannot be connected to or accessed through the internet. They can be connected only to nodes in the openGauss. The pghba.conf file of the database nodes stores only configurations of intra-openGauss node connections and trusted...

openGauss: Setting the Timeout Period of Client Authentication

authenticationtimeout specifies the maximum time for client authentication. The default value is 1 min. This parameter prevents faulty clients from occupying the connection channel for a long time. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenc...

openGauss: Enabling the Auditing of Database Startup, Stop, Restoration, and Switchover

The parameter auditdatabaseprocess specifies whether to audit database startup, stop, switchover, and restoration. After this parameter is set to on, database running status is traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...

openGauss: Configuring the Level of Error-Deriving SQL Statements to Be Logged

The logminerrorstatement parameter specifies which level of SQL statements that cause an error will be recorded into server logs. SQL statements whose levels are higher than or equal to the configured level will be recorded into server logs. The valid values include DEBUG5, DEBUG4, DEBUG3, DEBUG2...

openGauss: Enabling the Log Collector

The parameter loggingcollector specifies whether the log collector is enabled. The log collection process captures log messages sent to stderr or csvlog and writes them to log files, avoiding data loss during Syslog logging. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

openGauss: Configuring the Number of Authentication and Encryption Iterations

Configure the number of iterations during the generation of encryption information for authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

openGauss: Avoiding Asterisks (*) or 0.0.0.0 in Monitored IP Addresses

Monitored IP addresses must not contain asterisks or 0.0.0.0 because an asterisk or 0.0.0.0 indicates that all available IP addresses will be monitored. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

openGauss: Configuring the Upper Limit of Failed Login Attempts

You are advised to set the upper limit of failed login attempts to protect passwords from brute-force attacks. After the parameter failedloginattempts is set, an account will be automatically locked if the number of its failed login attempts exceeds the parameter value. Copyright C 2020 Greenbone...

openGauss: Enabling the Logging of User Login

The parameter logconnections specifies whether to record each connection attempt and the successful client connection authentication in server logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

openGauss: Configuring the Number of Connections to a Role

The number of connections to a role must be limited. If rolconnlimit is set to -1, the number of concurrent connections is unlimited. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Checking the CREATEDB Permission

Only the role with the CREATEDB permission can create databases. Such a role can also create and define database users. To avoid arbitrary database creation, delete roles that do not require the CREATEDB permission. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpte...

openGauss: Setting user for host Entries in the pg_hba.conf File

If user is set to all for host entries, any users are allowed to access the database. You are advised to set user for host entries to the user who needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and ar...

openGauss: Disabling Log Overwriting

The parameter logtruncateonrotation specifies whether openGauss deletes or overwrites rather than append the existing log file with the same name. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

openGauss: Configuring the Minimum Audit Log File Retention Period

The parameter auditfileremaintime specifies the minimum period for storing audit logs. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

openGauss: Changing the Password of the Initial User

An initial user is the system administrator with the ID 10 and has the highest permission in openGauss. This user cannot be modified. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Deleting the Default User Name

You are advised not to use a well-known user name, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

openGauss: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking such a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your permissions. Copyright C 2020 Greenbone Networks Gmb...