From: | HexaCluster via PostgreSQL Announce <announce-noreply(at)postgresql(dot)org> |
---|---|
To: | PostgreSQL Announce <pgsql-announce(at)lists(dot)postgresql(dot)org> |
Subject: | pgdsat v1.1 released |
Date: | 2024-04-22 18:02:23 |
Message-ID: | 171380894360.684.2753736734178057606@wrigleys.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-announce |
Hanoi, Vietnam - April 19th, 2024
## pgdsat - PostgreSQL Database Security Assessment Tool
pgdsat is a security assessment tool that checks around 80 PostgreSQL security
controls of your PostgreSQL clusters including all recommendations from the
CIS compliance benchmark but not only.
This PostgreSQL Security Assessment Tool allow assessments to be carried out
in an automated manner to verify the security policies established inside the
company. It also gives understanding of the security issued that your cluster
can be faced.
It consists in a single command that must be run on the PostgreSQL server to
collect all necessaries system and PostgreSQL information to compute a security
assessment report. A report consist in a summary of all tests status and a second
part with all detailed information. See a [sample report](https://www.darold.net/sample_pgdsat/report.html).
This release adds new checks and fixes issues reported by users since the first
release published for the event of FOSSASIA 2024 in Hanoi. New features:
* Add cluster version mismatch check if `--cluster` is used.
* Add a check to ensure a data anonymization extension is installed (pg_anonymize or anon).
* Add check to ensure tablespace location is not inside the PGDATA.
* Add statistics about checksum failures if any.
* Double check the Unix socket permission on disk.
* Add check to ensure that the public schema is protected in all database.
For the complete list of changes, please checkout the release note
on [https://github.com/hexacluster/pgdsat/blob/master/ChangeLog](https://github.com/hexacluster/pgdsat/blob/master/ChangeLog)
## Links & Credits
pgdsat is an open project. Any contribution to build a better
tool is welcome. You just have to send your ideas, features requests
or patches using the GitHub tools.
Thank to the developers who submitted patches and users who reported
bugs and feature requests, they are all cited in the ChangeLog file.
Links:
* Sample report: [http://www.darold.net/sample_pgdsat/report.html](http://www.darold.net/sample_pgdsat/report.html)
* Download: [https://github.com/hexacluster/pgdsat/releases](https://github.com/hexacluster/pgdsat/releases)
* Development: [https://github.com/hexacluster/pgdsat](https://github.com/hexacluster/pgdsat)
* Changelog: [https://github.com/hexacluster/pgdsat/blob/master/ChangeLog]([https://github.com/hexacluster/pgdsat/blob/master/ChangeLog)
-----------------
**About pgdsat**
The objective of pgdsat is to have an Open Source and free tool to help PostgreSQL
users to enforce the security of their PostgreSQL clusters. Not all checks might
correspond to your security policies but pgdsat aims to be a reference on which
you can rely to check the compliance of security points with your policy.
Tool created at HexaCluster Corp and maintained by Gilles Darold.
pgdsat works on Linux platform and is available under the GPLv3 licence.
From | Date | Subject | |
---|---|---|---|
Next Message | Philippe Beaudoin via PostgreSQL Announce | 2024-04-22 18:03:37 | Announcing E-Maj 4.4.0. |
Previous Message | ReData via PostgreSQL Announce | 2024-04-17 18:01:10 | SmartXML 1.0 Tool for loading XML into PostgreSQL |