From: Goldsmith, Christopher [ASM Research] <christopher.goldsmith@asmr.com>
To: pgsql-admin@postgresql.org <pgsql-admin@postgresql.org>
Subject: Postgres vs EnterpriseDB Vulnerability scans with Nessus
Date: Fri, 30 Jun 2017 16:29:40 +0000
Message-ID: <DM5PR10MB19956E766AC51125EE18DB868AD30@DM5PR10MB1995.namprd10.prod.outlook.com> (raw)
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
We are using Nessus Version: 5.5.0 to run Vulnerability scans of our EnterpriseDB 9.5..x instances and Nessus is using up-to-date Postgres audit file/ policy / definitions.
Is there anyone here that uses EnterpriseDB fork of Postgres and can confirm if the EnterpriseDB and Postgres are close enough that the results are valid and can be trusted.
Our need for all this is to meet Federal audit requirements.
The information contained in this message may be privileged and/or confidential and protected from disclosure. If the reader of this message is not the intended recipient or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately by replying to this message and deleting the material from any computer.
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: christopher.goldsmith@asmr.com
Subject: Re: Postgres vs EnterpriseDB Vulnerability scans with Nessus
In-Reply-To: <DM5PR10MB19956E766AC51125EE18DB868AD30@DM5PR10MB1995.namprd10.prod.outlook.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox