openGauss: Configuring the Number of Connections to a Role

The number of connections to a role must be limited. If rolconnlimit is set to -1, the number of concurrent connections is unlimited. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Avoiding Asterisks (*) or 0.0.0.0 in Monitored IP Addresses

Monitored IP addresses must not contain asterisks or 0.0.0.0 because an asterisk or 0.0.0.0 indicates that all available IP addresses will be monitored. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

openGauss: Configuring the Level of Error-Deriving SQL Statements to Be Logged

The logminerrorstatement parameter specifies which level of SQL statements that cause an error will be recorded into server logs. SQL statements whose levels are higher than or equal to the configured level will be recorded into server logs. The valid values include DEBUG5, DEBUG4, DEBUG3, DEBUG2...

openGauss: Setting the Timeout Period of Client Authentication

authenticationtimeout specifies the maximum time for client authentication. The default value is 1 min. This parameter prevents faulty clients from occupying the connection channel for a long time. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenc...

openGauss: Controlling the Permission to Execute the SECURITY DEFINER Function

Because the SECURITY DEFINER function is executed with the privileges of the user that created it, ensure that this function is not misused. For security purposes, set searchpath to exclude any schemas writable by untrusted users. This prevents malicious users from creating objects that mask...

openGauss: Disabling Log Overwriting

The parameter logtruncateonrotation specifies whether openGauss deletes or overwrites rather than append the existing log file with the same name. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

openGauss: Enabling the Auditing of the Query of Database Objects

The parameter auditdmlstateselect specifies whether to audit the SELECT operation on database objects. After this parameter is set to on, the SELECT operation on database objects is traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced source...

openGauss: Changing the Password of the Initial User

An initial user is the system administrator with the ID 10 and has the highest permission in openGauss. This user cannot be modified. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openGauss: Unknown Roles

Check the purpose of each unknown role in the query and delete unnecessary Roles. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

openGauss: Enabling the Log Collector

The parameter loggingcollector specifies whether the log collector is enabled. The log collection process captures log messages sent to stderr or csvlog and writes them to log files, avoiding data loss during Syslog logging. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

openGauss: Configuring the WAL Information Recording Level

The parameter wallevel specifies the level of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

openGauss: Revoking the CREATE Permission from a User with the PUBLIC Role

A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can...

openGauss: Configuring the Upper Limit of Failed Login Attempts

You are advised to set the upper limit of failed login attempts to protect passwords from brute-force attacks. After the parameter failedloginattempts is set, an account will be automatically locked if the number of its failed login attempts exceeds the parameter value. Copyright C 2020 Greenbone...

openGauss: Checking the CREATEROLE Permission

Only the role with the CREATEROLE permission can create, modify, or delete other roles. Such a role can also grant permissions to or revoke permissions of other roles. To avoid arbitrary permission granting, delete roles that do not require the CREATEROLE permission. Copyright C 2020 Greenbone...

openGauss: Enabling the Archiving Mode

The parameter wallevel specifies the amount of information to be written into a WAL. If wallevel is set to the minimum value, information recorded in backup files and WALs is insufficient to reconstruct databases. Therefore, you must set wallevel to archive or hotstandby, and enable the archiving...

openGauss: Deleting the Default User Name

You are advised not to use a well-known user name, for example, postgres. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

openGauss: Setting Source IP Address for host Entries in the pg_hba.conf File

If source IP address is set to all or 0.0.0.0/0 for host entries, any IP addresses can access the database. You are advised to set source IP address for host entries to the IP address that needs to connect to the database. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be...

openGauss: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Configuring Node Connections in the pg_hba.conf File of the Database Node in openGauss

openGauss nodes are deployed on the secure intranet. Database nodes cannot be connected to or accessed through the internet. They can be connected only to nodes in the openGauss. The pghba.conf file of the database nodes stores only configurations of intra-openGauss node connections and trusted...

openGauss: Configuring the Number of Authentication and Encryption Iterations

Configure the number of iterations during the generation of encryption information for authentication. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...