From: Joe Conway <mail@joeconway.com>
To: Goldsmith, Christopher [ASM Research] <christopher.goldsmith@asmr.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Re: Postgres vs EnterpriseDB Vulnerability scans with Nessus
Date: Fri, 30 Jun 2017 13:45:24 -0700
Message-ID: <314b48fc-ae41-eaee-3c54-49e1d3bc355b@joeconway.com> (raw)
In-Reply-To: <DM5PR10MB19956E766AC51125EE18DB868AD30@DM5PR10MB1995.namprd10.prod.outlook.com>
References: <DM5PR10MB19956E766AC51125EE18DB868AD30@DM5PR10MB1995.namprd10.prod.outlook.com>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
On 06/30/2017 09:29 AM, Goldsmith, Christopher [ASM Research] wrote:
> We are using Nessus Version: 5.5.0 to run Vulnerability scans of our
> EnterpriseDB 9.5..x instances and Nessus is using up-to-date Postgres
> audit file/ policy / definitions.
>
> Is there anyone here that uses EnterpriseDB fork of Postgres and can
> confirm if the EnterpriseDB and Postgres are close enough that the
> results are valid and can be trusted.
EDB is a proprietary fork with unknown modifications (i.e. we on this
list don't have access to their source code), thus I think only EDB can
answer that question. You should be asking them.
Joe
--
Crunchy Data - http://crunchydata.com
PostgreSQL Support for Secure Enterprises
Consulting, Training, & Open Source Development
Attachments:
signature.asc (application/pgp-signature, 818B) download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: mail@joeconway.com, christopher.goldsmith@asmr.com
Subject: Re: Postgres vs EnterpriseDB Vulnerability scans with Nessus
In-Reply-To: <314b48fc-ae41-eaee-3c54-49e1d3bc355b@joeconway.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox