From: Wetmore, Matthew (CTR) <Matthew.Wetmore@express-scripts.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
To: martin.nguyen@oracle.com <martin.nguyen@oracle.com>
Cc: pgsql-bugs@lists.postgresql.org <pgsql-bugs@lists.postgresql.org>
Subject: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
Date: Fri, 16 Feb 2024 21:39:05 +0000
Message-ID: <bb120b6b4d524cec9842a931201c202f@express-scripts.com> (raw)
In-Reply-To: <3525669.1708119351@sss.pgh.pa.us>
References: <18350-ed2d82ff23d8a7e3@postgresql.org>
<3525669.1708119351@sss.pgh.pa.us>
I think they mean the application connections from the UI to the backend, not backend SQL user login connection limits.
JAVA would be Hakari max_pool = 10 or something to that effect.
(I've been through this before), but you should check the requirement.
-----Original Message-----
From: Tom Lane <tgl@sss.pgh.pa.us>
Sent: Friday, February 16, 2024 1:36 PM
To: martin.nguyen@oracle.com
Cc: pgsql-bugs@lists.postgresql.org
Subject: [EXTERNAL] Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
PG Bug reporting form <noreply@postgresql.org> writes:
> We have identified an issue where predefined roles are not modifiable,
> however a Dept. of VA security checklist requires that no roles have
> unlimited connections. The Predefined roles have unlimited
> connections, is there a way to modify these?
Solution 1: explain to your compliance department that it's pointless to worry about the connection limit for a role that can't log in.
Solution 2: do a manual UPDATE on pg_authid. This would have to be done over after any major-version upgrade, though.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: Matthew.Wetmore@express-scripts.com, tgl@sss.pgh.pa.us, martin.nguyen@oracle.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
In-Reply-To: <bb120b6b4d524cec9842a931201c202f@express-scripts.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox