BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist

From: "Wetmore, Matthew (CTR)" <Matthew(dot)Wetmore(at)express-scripts(dot)com>
To: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, "martin(dot)nguyen(at)oracle(dot)com" <martin(dot)nguyen(at)oracle(dot)com>
Cc: "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist
Date: 2024-02-16 21:39:05
Message-ID: bb120b6b4d524cec9842a931201c202f@express-scripts.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

I think they mean the application connections from the UI to the backend, not backend SQL user login connection limits.

JAVA would be Hakari max_pool = 10 or something to that effect.

(I've been through this before), but you should check the requirement.

-----Original Message-----
From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Sent: Friday, February 16, 2024 1:36 PM
To: martin(dot)nguyen(at)oracle(dot)com
Cc: pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: [EXTERNAL] Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist

PG Bug reporting form <noreply(at)postgresql(dot)org> writes:
> We have identified an issue where predefined roles are not modifiable,
> however a Dept. of VA security checklist requires that no roles have
> unlimited connections. The Predefined roles have unlimited
> connections, is there a way to modify these?

Solution 1: explain to your compliance department that it's pointless to worry about the connection limit for a role that can't log in.

Solution 2: do a manual UPDATE on pg_authid. This would have to be done over after any major-version upgrade, though.

regards, tom lane

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message jian he 2024-02-17 01:47:58 Re: BUG #18348: Inconsistency with EXTRACT([field] from INTERVAL);
Previous Message Tom Lane 2024-02-16 21:35:51 Re: BUG #18350: Modifying predefined roles' unlimited connections for VA STIG cybersecurity checklist