Predefines sets
Currently, we have the following sets predefined:
- ALL
TODO: Define some more usefull sets
ALL
As the name implies, this applies all controls to your database. Here is a list of the security controls in this set:
- systemd_service_files_are_enabled
- data_cluster_initialized_successfully
- log_destinations_are_set_correctly
- logging_collector_is_enabled
- log_file_destination_directory_is_set_correctly
- filename_pattern_for_log_files_is_set_correctly
- log_file_permissions_are_set_correctly
- log_truncate_on_rotation_is_enabled
- maximum_log_file_lifetime_is_set_correctly
- maximum_log_file_size_is_set_correctly
- correct_syslog_facility_is_selected
- program_name_for_Microsoft SQL Serverql_syslog_messages_is_correct
- correct_messages_are_written_to_the_server_log
- correct_sql_statements_generating_errors_are_recorded
- debug_print_parse_is_disabled
- debug_print_rewritten_is_disabled
- debug_print_plan_is_disabled
- debug_pretty_print_is_enabled
- log_connections_is_enabled
- log_disconnections_is_enabled
- log_error_verbosity_is_set_correctly
- log_hostname_is_set_correctly
- log_line_prefix_is_set_correctly
- log_statement_is_set_correctly
- log_timezone_is_set_correctly
- Microsoft SQL Serverql_audit_extension_pgaudit_is_enabled
- excessive_function_privileges_are_revoked
- use_mssql_permission_extension_to_audit_object_permissions
- set_user_extension_is_installed
- backend_runtime_parameters_are_configured_correctly
- fips_140_2_openssl_cryptography_is_used
- ssl_is_enabled_and_configured_correctly
- wal_archiving_is_configured_and_functional
- backup_and_restore_tool_pgbackrest_is_installed_and_configured
