MIME-Version: 1.0
References: 
 <CAHkcXnwDsxJDMyWK2ZvB+Rci7TJ=DmsPL9T7k4khMoscHk+7mw@mail.gmail.com>
In-Reply-To: 
 <CAHkcXnwDsxJDMyWK2ZvB+Rci7TJ=DmsPL9T7k4khMoscHk+7mw@mail.gmail.com>
From: Muhammad Usman Khan <usman.k@bitnine.net>
Date: Tue, 8 Oct 2024 08:20:59 +0500
Message-ID: 
 <CAPnRvGsbFQt5sUYH-QgMyKHs7F8T2oOH8BAMzrWg84pNZq+psA@mail.gmail.com>
Subject: Re: Ensure 'User' Runtime Parameters are Configured
To: pramod kg <pramod11287@gmail.com>
Cc: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="0000000000001710420623eea124"
Archived-At: 
 <https://www.postgresql.org/message-id/CAPnRvGsbFQt5sUYH-QgMyKHs7F8T2oOH8BAMzrWg84pNZq%2BpsA%40mail.gmail.com>
Precedence: bulk

--0000000000001710420623eea124
Content-Type: text/plain; charset="UTF-8"

Hi,
There is not a predefined method to achieve this but you can get your
desired output by implementing the following logics:

   -   Enable Detailed Logging by setting the following parameters in
   postgresql.conf file:
     logging_collector = on
     log_statement = 'all'
     log_duration = on
   -   Implement Auditing with pgaudit
   -   Restrict Privileges
   -   Automated Reversion:
     Schedule a job that compares current settings with default_parameters
   and reverts any discrepancies.


On Mon, 7 Oct 2024 at 13:33, pramod kg <pramod11287@gmail.com> wrote:

> Hi All,
>
> There is a requirement to monitor run time parameters and revert back
> changes (As per CIS Benchmark report). Requirement is to monitor user
> session parameter changes. How to achieve this? Any guidance is appreciated
>
> Complete remediation given by CIS benchmark is as follows:
>
> In the matter of a user session, the login sessions must be validated that
> it is not executing
> undesired parameter changes. In the matter of attributes that have been
> changed in
> entities, they must be manually reverted to its default value(s).
>
>
> Regards,
> Pramod
>

--0000000000001710420623eea124
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div dir=3D"ltr" class=3D"gmail_signature" data-smart=
mail=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr"><div><font =
face=3D"arial, sans-serif">Hi,<br>There is not a predefined method to achie=
ve this but you can get your desired output by implementing the following l=
ogics:</font></div><div><ul><li><font face=3D"arial, sans-serif">=C2=A0 Ena=
ble Detailed Logging by setting the following parameters in postgresql.conf=
 file:<br>=C2=A0 logging_collector =3D on
<br>=C2=A0 log_statement =3D &#39;all&#39;
<br>=C2=A0 log_duration =3D on<br></font></li><li><font face=3D"arial, sans=
-serif">=C2=A0 Implement Auditing with <code>pgaudit</code><br></font></li>=
<li><code><font face=3D"arial, sans-serif">=C2=A0 Restrict Privileges=C2=A0=
</font></code></li><li><code><font face=3D"arial, sans-serif">=C2=A0 Automa=
ted Reversion:<br>=C2=A0 Schedule a job that compares current settings with=
 <code style=3D"">default_parameters</code> and reverts any discrepancies.<=
/font>=C2=A0=C2=A0<br></code></li></ul></div></div></div></div></div></div>=
<br></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Mon, 7 Oct 2024 at 13:33, pramod kg &lt;<a href=3D"mailto:pramod1128=
7@gmail.com">pramod11287@gmail.com</a>&gt; wrote:<br></div><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r=
gb(204,204,204);padding-left:1ex"><div dir=3D"ltr">Hi All,<div><br></div><d=
iv>There is a requirement=C2=A0to monitor run time parameters and revert ba=
ck changes (As per CIS Benchmark report). Requirement is to monitor user se=
ssion parameter changes. How to achieve this? Any guidance=C2=A0is apprecia=
ted</div><div><br></div><div>Complete remediation given by CIS benchmark is=
 as follows:<br></div><div><br></div><div>In the matter of a user session, =
the login sessions must be validated that it is not executing<br>undesired =
parameter changes. In the matter of attributes that have been changed in<br=
>entities, they must be manually reverted to its default value(s).<br></div=
><div><br></div><div><br></div><div>Regards,</div><div>Pramod</div></div>
</blockquote></div>

--0000000000001710420623eea124--