Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dR1UQ-00088R-L8 for pgsql-admin@arkaria.postgresql.org; Fri, 30 Jun 2017 19:22:02 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1dR1UQ-0000UL-37 for pgsql-admin@arkaria.postgresql.org; Fri, 30 Jun 2017 19:22:02 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dQyno-0001Ld-Ag for pgsql-admin@postgresql.org; Fri, 30 Jun 2017 16:29:52 +0000 Received: from mail-dm3nam03on0134.outbound.protection.outlook.com ([104.47.41.134] helo=NAM03-DM3-obe.outbound.protection.outlook.com) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dQynf-0000It-CC for pgsql-admin@postgresql.org; Fri, 30 Jun 2017 16:29:51 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=afs365.onmicrosoft.com; s=selector1-asmr-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HuZTkUjr90gSD2UZGj9nwZKPGJoFR4kdBmeTx50cY8s=; b=Px2UqrjcvJCmS1qAooqql21RoyrKRcRfSJ5nRlGGxP2y/Ibko2Ir2+GK3hJ/XIAfD7/CVBiX7oQlqz+Vt4YO+ttRmco75sQ/SN7cSI37s2rr4SkCRx4al0xExyGeQak+KOAHOgQT6sGrUZWIIjJ89lELuch+8p0ITo6ZRyOsnao= Received: from DM5PR10MB1995.namprd10.prod.outlook.com (10.175.90.22) by DM5PR10MB1996.namprd10.prod.outlook.com (10.175.90.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1199.15; Fri, 30 Jun 2017 16:29:40 +0000 Received: from DM5PR10MB1995.namprd10.prod.outlook.com ([10.175.90.22]) by DM5PR10MB1995.namprd10.prod.outlook.com ([10.175.90.22]) with mapi id 15.01.1199.022; Fri, 30 Jun 2017 16:29:40 +0000 From: "Goldsmith, Christopher [ASM Research]" To: "pgsql-admin@postgresql.org" Subject: Postgres vs EnterpriseDB Vulnerability scans with Nessus Thread-Topic: Postgres vs EnterpriseDB Vulnerability scans with Nessus Thread-Index: AdLxuUiOa9VAZmyDSquFePNilC1/fQ== Date: Fri, 30 Jun 2017 16:29:40 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: postgresql.org; dkim=none (message not signed) header.d=none;postgresql.org; dmarc=none action=none header.from=asmr.com; x-originating-ip: [170.248.173.247] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1;DM5PR10MB1996;7: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 x-ms-office365-filtering-correlation-id: 808b7953-d340-4e07-5dc1-08d4bfd534ef x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254075)(48565401081)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:DM5PR10MB1996; x-ms-traffictypediagnostic: DM5PR10MB1996: x-asmexternalmailfooter: true03142017 x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(151999592597050)(26388249023172)(236129657087228)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(10201501046)(100000703101)(100105400095)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123558100)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123564025)(20161123555025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:DM5PR10MB1996;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DM5PR10MB1996; x-forefront-prvs: 0354B4BED2 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(6009001)(39850400002)(39860400002)(39400400002)(39410400002)(39450400003)(39840400002)(81166006)(8936002)(7736002)(8676002)(25786009)(2900100001)(50986999)(54356999)(790700001)(102836003)(110136004)(38730400002)(2501003)(3846002)(6116002)(6916009)(478600001)(33656002)(6436002)(77096006)(53936002)(2351001)(189998001)(14454004)(7696004)(2906002)(5630700001)(6506006)(68736007)(5660300001)(55016002)(66066001)(99286003)(74316002)(3660700001)(3280700002)(86362001)(9686003)(54896002)(6306002)(5640700003);DIR:OUT;SFP:1102;SCL:1;SRVR:DM5PR10MB1996;H:DM5PR10MB1995.namprd10.prod.outlook.com;FPR:;SPF:None;MLV:ovrnspm;PTR:InfoNoRecords;LANG:en; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR10MB19956E766AC51125EE18DB868AD30DM5PR10MB1995namp_" MIME-Version: 1.0 X-OriginatorOrg: asmr.com X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2017 16:29:40.1622 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 0ee6c63b-4eab-4748-b74a-d1dc22fc1a24 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR10MB1996 List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org --_000_DM5PR10MB19956E766AC51125EE18DB868AD30DM5PR10MB1995namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We are using Nessus Version: 5.5.0 to run Vulnerability scans of our Enterp= riseDB 9.5..x instances and Nessus is using up-to-date Postgres audit file/= policy / definitions. Is there anyone here that uses EnterpriseDB fork of Postgres and can confir= m if the EnterpriseDB and Postgres are close enough that the results are va= lid and can be trusted. Our need for all this is to meet Federal audit requirements. The information contained in this message may be privileged and/or confiden= tial and protected from disclosure. If the reader of this message is not th= e intended recipient or agent responsible for delivering this message to th= e intended recipient, you are hereby notified that any dissemination, distr= ibution or copying of this communication is strictly prohibited. If you hav= e received this communication in error, please notify the sender immediatel= y by replying to this message and deleting the material from any computer. --_000_DM5PR10MB19956E766AC51125EE18DB868AD30DM5PR10MB1995namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We are using Nessus Version: 5.5.0 to run Vulnerabil= ity scans of our EnterpriseDB 9.5..x instances and Nessus is using up-to-da= te Postgres audit file/ policy / definitions.

 

Is there anyone here that uses EnterpriseDB fork of = Postgres and can confirm if the EnterpriseDB and Postgres are close enough = that the results are valid and can be trusted.

 

Our need for all this is to meet Federal audit requi= rements.



The information contained in this message may be privileged and/or confiden= tial and protected from disclosure. If the reader of this message is not th= e intended recipient or agent responsible for delivering this message to th= e intended recipient, you are hereby notified that any dissemination, distribution or copying of this communica= tion is strictly prohibited. If you have received this communication in err= or, please notify the sender immediately by replying to this message and de= leting the material from any computer. --_000_DM5PR10MB19956E766AC51125EE18DB868AD30DM5PR10MB1995namp_--