An XCCDF skeleton for PostgreSQL
by Sven Vermeulen, post on Sat 14 December 2013In a previous post I wrote about the documentation structure I have in mind for a PostgreSQL security best practice. Considering what XCCDF can give us, the idea is to have the following structure:
Hardening PostgreSQL
+- Basic setup
+- Instance level configuration
| +- Pre-startup configuration
| `- PostgreSQL internal configuration
+- Database recommendations
`- User definitions …Documenting security best practices - XCCDF introduction
by Sven Vermeulen, post on Thu 12 December 2013When I have some free time, I try to work on a Gentoo Security Benchmark which not only documents security best practices (loosely based on the Gentoo Security Handbook which hasn't seen much updates in the last few years) but also uses the SCAP protocols. This set of protocols allows …