PostgreSQL Log Disconnections Not Set
- Query id: 054d07b5-941b-4c28-8eef-18989dc62323
- Query name: PostgreSQL Log Disconnections Not Set
- Platform: Ansible
- Severity: Medium
- Category: Observability
- CWE: 778
- URL: Github
Description¶
Make sure that for PostgreSQL Database, server parameter 'log_disconnections' is set to 'ON'
Documentation
Code samples¶
Code samples with security vulnerabilities¶
Positive test num. 1 - yaml file
---
- name: Update PostgreSQL Server setting
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: off
- name: Update PostgreSQL Server setting2
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: Off
- name: Update PostgreSQL Server setting3
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: OFF
- name: Update PostgreSQL Server setting4
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: "off"
- name: Update PostgreSQL Server setting5
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: "Off"
- name: Update PostgreSQL Server setting6
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: "OFF"
Code samples without security vulnerabilities¶
Negative test num. 1 - yaml file
- name: Update PostgreSQL Server setting
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: on
- name: Update PostgreSQL Server setting2
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: On
- name: Update PostgreSQL Server setting3
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: ON
- name: Update PostgreSQL Server setting4
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: on
- name: Update PostgreSQL Server setting5
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: On
- name: Update PostgreSQL Server setting6
azure.azcollection.azure_rm_postgresqlconfiguration:
resource_group: myResourceGroup
server_name: myServer
name: log_disconnections
value: ON