Detailed breakdown of gathered data

GNU/Linux operating system ### barman crontab/cron (barman_crontab_cron )

Description

Output from crontab -l , if running as barman. Content of /etc/cron.d/barman , if it exists.

Report output

  • File /linux/barman_cron.data : Content of /etc/cron.d/barman , if it exists

  • File /linux/barman_crontab.data : Output from barman crontab -l , if barman user

Depth

Surface

Security impact

Low — Might have entries in crontab/cron with sensitive data

debug_sources (debug_sources )

Description

Counts files under /usr/src/debug to detect the application source code present in the system and ease live debugging

Report output

File /linux/debug_sources.data : Sources for GNU debugger

Depth

Surface

Security impact

Low — No known security impact

EFM CLI (efm_cli )

Description

Gets output of efm cluster-status command

Report output

File /tools/efm/cli/cluster_status.out : Output of efm cluster-status <cluster_name> command

Depth

Surface #### Security impact

Low — No known security impact.

EFM configuration (efm_configuration )

Description

EFM properties and nodes configuration files

Report output

  • File /tools/efm/config/efm.nodes : EFM nodes file

  • File /tools/efm/config/efm.properties : EFM properties file

Depth

Surface #### Security impact

Low — No known security impact.

EFM systemctl (efm_systemctl )

Description

When EFM services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with edb-efm- .

Report output

  • File /tools/efm/systemd/<service_name>_cat.data : Output of ’systemctl cat

  • File /tools/efm/systemd/<service_name>_status.data : Output of ’systemctl status

Depth

Surface

Security impact

Low — No known security impact.

etcd CLI (etcd_cli )

Description

Gathers the output of some etcdctl commands, if etcdctl is available in the server. The commands are endpoint status and endpoint health .

Report output

  • File /tools/etcd/cli/endpoint_status.out : Output of etcdctl endpoint status command

  • File /tools/etcd/cli/endpoint_health.out : Output of etcdctl endpoint health command

Depth

Surface

Security impact

Low — No known security impact.

etcd configuration (etcd_configuration )

Description

Collects etcd configuration file that’s found in the server

Report output

File /tools/etcd/config/<basename> : etcd configuration file

Depth

Surface

Security impact

Low — No known security impact.

etcd systemctl (etcd_systemctl )

Description

When etcd services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with etcd .

Report output

  • File /tools/etcd/systemd/<service_name>_cat.data : Output of ’systemctl cat

  • File /tools/etcd/systemd/<service_name>_status.data : Output of ’systemctl status

Depth

Surface

Security impact

Low — No known security impact.

HARP CLI (harp_cli )

Description

Gathers output of a few harpctl command outputs using the config.yml file that’s found in the server. The commands are: cluster , proxies , locations , nodes , and version .

Report output

  • File /tools/harp/cli/version.out : Output of harp -f <conf_file_path> version command

  • File /tools/harp/cli/proxies.out : Output of harp -f <conf_file_path> get proxies -o yaml command

  • File /tools/harp/cli/nodes.out : Output of harp -f <conf_file_path> get nodes -o yaml command

  • File /tools/harp/cli/locations.out : Output of harp -f <conf_file_path> get locations -o yaml command

  • File /tools/harp/cli/cluster.out : Output of harp -f <conf_file_path> get cluster -o yaml command

Depth

Surface

Security impact

Low — No known security impact.

HARP configuration (harp_configuration )

Description

Collects HARP configuration file that’s found in the server

Report output

  • File /tools/harp/config/harp.cluster.init.yml : HARP bootstrap configuration file

  • File /tools/harp/config/<basename> : HARP configuration file

Depth

Surface

Security impact

Low — No known security impact.

HARP systemctl (harp_systemctl )

Description

When HARP services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with harp .

Report output

  • File /tools/harp/systemd/<service_name>_cat.data : Output of ’systemctl cat

  • File /tools/harp/systemd/<service_name>_status.data : Output of ’systemctl status

Depth

Surface

Security impact

Low — No known security impact.

Block devices layout (linux_block_devices_layout )

Description

Information on block devices layout from the lsblk command

Report output

File /linux/lsbk.data : lsbk command output

Depth

Surface

Security impact

Low — No known security impact.

Processor governor (linux_cpu_governor )

Description

Processor scaling governor from the files in /sys/devices/system/cpu

Report output

  • File /linux/sys/energy_perf_bias.data : Intel Performance and Energy Bias attributes

  • File /linux/sys/intel_pstate.data : Intel pstate configuration

  • File /linux/sys/cpu_scaling_driver.data : available CPU scaling driver

  • File /linux/sys/cpu_scaling_available_governors.data : available CPU scaling governors

  • File /linux/sys/cpu_scaling_governor.data : active CPU scaling governor

Depth

Surface

Security impact

Low — No known security impact.

Mounted file systems and available space (linux_devices_info )

Description

Lists mounted filesystems through the mount command and free space using df

Report output

  • File /linux/diskspace.data : amount of available disk space

  • File /linux/mount.data : Output of the mount command

Depth

Surface

Security impact

Low — No known security impact.

File systems configuration (linux_disk_configuration )

Description

Disk configuration obtained through the /etc/fstab file

Report output

File /linux/fstab.data : contents of /etc/fstab

Depth

Surface

Security impact

Low — No known security impact.

OS distribution, kernel and device data (linux_distro_collector )

Description

Information about the Linux distribution currently in use, as returned by the lsb_release command

Report output

  • File /linux/release.data : The Linux distribution currently in use

  • File /linux/release_source.data : The name of the collected file or the executed command

Depth

Surface

Security impact

Low — No known security impact.

Hardware (linux_hardware_info )

Description

Hardware info through lspci

Report output

File /linux/lspci.data : Hardware info from lspci

Depth

Surface

Security impact

Low — No known security impact.

Hypervisor (linux_hypervisor_collector )

Description

Information about the type of virtualization used, as returned by the systemd-detect-virt command

Report output

File /linux/hypervisor.data : The name of the collected file or the executed command

Depth

Surface

Security impact

Low — No known security impact.

Kernel (linux_kernel_info )

Description

Kernel info, transparent huge pages status, and disk scheduler configuration obtained by combining the output of the commands uname and ipcs with the contents of the /proc and /sys filesystems

Report output

  • File /linux/read_ahead.data : Info on the read ahead

  • File /linux/schedulers.data : Scheduler info from /sys dir

  • File /linux/sys/kernel_mm_transparent_hugepage.data : Transparent huge pages info

  • File /linux/ipcs.data : ipcs command output

  • File /linux/uname.data : uname command output

Depth

Surface

Security impact

Low — No known security impact.

Kernel limits (linux_kernel_limits )

Description

Configuration file for the pam_limits module

Report output

File /linux/limits.data : content of the limits.conf file

Depth

Surface

Security impact

Low — No known security impact.

Processor usage statistics (linux_mpstat )

Description

Processor statistics from the mpstat command.

Report output

File /linux/mpstat.data : Output from ‘mpstat -P ALL 1 10’

Depth

Surface

Security impact

Low — No known security impact.

Network interfaces (linux_network_interfaces )

Description

Network interface information from the ip and ifconfig commands

Report output

  • File /linux/ifconfig.data : Output from ‘ifconfig’

  • File /linux/ip_address_list.data : Output from ‘ip address list’

Depth

Surface

Security impact

Low — No known security impact.

Installed packages via rpm or dpkg (linux_packages_info )

Description

Information about the system packages installed using rpm or dpkg

Report output

  • File /linux/packages-dpkg.data : List of packages installed using dpkg

  • File /linux/packages-rpm.data : List of packages installed using rpm

Depth

Surface

Security impact

Low — No known security impact.

PostgreSQL disk layout (linux_postgresql_disk_layout )

Description

Lists all files in the Postgres data directory using find for links and ls for files

Report output

  • File /linux/pg_ls.data : List of files inside the data directory

  • File /linux/pg_links.data : List of links inside the data directory

Depth

Surface

Security impact

Low — No known security impact.

SELinux (linux_sestatus )

Description

SELinux status from sestatus

Report output

File /linux/sestatus.data : Output from ‘setstatus’

Depth

Surface

Security impact

Low — No known security impact.

System identification (linux_system_identity )

Description

Collects hostname, network interfaces, system info (uname), system identifier, and release info

Report output

  • File /linux/id/system_release.data : OS information from /etc/system-release

  • File /linux/id/os_release.data : OS information from /etc/os-release

  • File /linux/id/machine_id.data : Machine ID contained in /etc/machine-id

  • File /linux/id/uname.data : Information about the running kernel

  • File /linux/id/hostname.data : Fully qualified domain name

  • File /linux/id/interfaces.data : Network addresses of the host

Depth

Surface

Security impact

Low — No known security impact.

dmesg and /proc information (linux_system_info )

Description

System info from the contents of the /proc filesystem and through the output of dmesg command.

Report output

  • File /linux/lsmod.data : Lsmod output

  • File /linux/dmesg_with_timestamp.data : Dmesg output (human readable timestamps)

  • File /linux/dmesg.data : Dmesg output

  • File /linux/proc/sys_net_ipv4.data : Network info from /proc

  • File /linux/proc/sys_vm.data : vm info from /proc

  • File /linux/proc/sys_kernel.data : Kernel info from /proc

  • File /linux/vmstat.data : VM statistics from /proc

  • File /linux/proc/mounts.data : Mount points from /proc

  • File /linux/proc/uptime.data : Uptime info from /proc

  • File /linux/proc/loadavg.data : Load avg from /proc

  • File /linux/proc/meminfo.data : Memory info from /proc

Depth

Surface

Security impact

Low — No known security impact.

System status - iostat (linux_system_status_iostat )

Description

System status from the iostat command

Report output

File /linux/iostat.data : Info on I/O statistics

Depth

Surface

Security impact

Low — No known security impact.

System status - nfsiostat (linux_system_status_nfsiostat )

Description

System status from the nfsiostat command

Report output

File /linux/nfsiostat.data : nfs I/O statistics

Depth

Surface

Security impact

Low — No known security impact.

System status - ps (linux_system_status_ps )

Description

System status from the ps command

Report output

File /linux/ps.data : Active processes info

Depth

Surface

Security impact

Low — Some processes might contain sensitive data in their names.

System status - sar (linux_system_status_sar )

Description

System status from the sar command

Report output

  • File /linux/sar.data : Actual sar info

  • File /linux/sar-yesterday.data : sar info from yesterday

Depth

Surface

Security impact

Low — No known security impact.

System status - top (linux_system_status_top )

Description

System status from the top command

Report output

File /linux/top.data : Process information

Depth

Surface

Security impact

Low — Some processes might contain sensitive data in their names.

System status - vmstat (linux_system_status_vmstat )

Description

System status from the vmstat command

Report output

File /linux/vmstat.data : Info on processes, memory, paging, block IO, traps, disks and cpu activity

Depth

Surface

Security impact

Low — No known security impact.

systemctl units (linux_systemctl_units )

Description

Systemctl list-units on a systemd server

Report output

File /linux/systemctl-list-units.data : Output of ‘systemctl list-units’

Depth

Surface

Security impact

Low — No known security impact.

tuned (linux_tuned )

Description

Tuned status and profiles

Report output

  • Directory /linux/tuned/tune-profiles : Files from /etc/tune-profiles

  • Directory /linux/tuned/tuned : Files from /etc/tuned

  • File /linux/tuned/tuned.conf : The file /etc/tuned.conf

  • File /linux/tuned/tuned-list.data : Output from tuned_adm list

  • File /linux/tuned/tuned-active.data : Output from tuned_adm active

Depth

Surface

Security impact

Low — No known security impact.

PEM configuration (pem_configuration )

Description

PEM configuration files from PEM agent, PEM server, and PEM web server

Report output

  • File /tools/pem/config/edb-ssl-pem.conf : PEM web server SSL configuration file

  • File /tools/pem/config/edb-pem.conf : PEM web server configuration file

  • File /tools/pem/config/install-config : PEM server configuration file (installation config file)

  • File /tools/pem/config/config_setup.py : PEM server setup configuration file

  • File /tools/pem/config/pem.wsgi : PEM server WSGI definition file

  • File /tools/pem/config/agent.cfg : PEM agent configuration file

Depth

Surface

Security impact

Low — No known security impact.

PEM systemctl (pem_systemctl )

Description

When PEM is detected, collects PEM agent and PEM web server status and content

Report output

  • File /tools/pem/systemd/<service_name>_cat.data : Output of ’systemctl cat

  • File /tools/pem/systemd/<service_name>_status.data : Output of ’systemctl status

Depth

Surface

Security impact

Low — No known security impact.

PgBouncer configuration (pgbouncer_configuration )

Description

PgBouncer configuration files

Report output

File /tools/pgbouncer/<num>/config/<basename> : PgBouncer configuration file from instance <num>

Depth

Surface

Security impact

Low — No known security impact.

PgBouncer systemctl (pgbouncer_systemctl )

Description

When PgBouncer services are detected, collects status and cat of the corresponding services. Checks for any service that contains any of the PgBouncer configuration files.

Report output

  • File /tools/pgbouncer/<num>/systemd/<service_name>_cat.data : Output of ’systemctl cat from instance <num>

  • File /tools/pgbouncer/<num>/systemd/<service_name>_status.data : Output of ’systemctl status from instance <num>

Depth

Surface

Security impact

Low — No known security impact.

postgres/enterprisedb crontab (postgres_enterprisedb_crontab )

Description

Output from crontab -l , if running as postgres or enterprisedb

Report output

  • File /linux/enterprisedb_crontab.data : Output from enterprisedb crontab -l, if enterprisedb user

  • File /linux/postgres_crontab.data : Output from postgres crontab -l, if postgres user

Depth

Surface

Security impact

Low — Might have entries in crontab/cron with sensitive data.

repmgr CLI (repmgr_cli )

Description

Collects output of repmgr cluster crosscheck and repmgr daemon status using the repmgr.conf file that’s found in the server

Report output

  • File /tools/repmgr/cli/daemon_status.out : Output of repmgr daemon status -f <conf_file_path> command

  • File /tools/repmgr/cli/cluster_crosscheck.out : Output of repmgr cluster crosscheck -f <conf_file_path> command

Depth

Surface

Security impact

Low — No known security impact.

repmgr configuration (repmgr_configuration )

Description

Collects repmgr configuration file that’s found in the server

Report output

File /tools/repmgr/config/repmgr.conf : repmgr configuration file

Depth

Surface

Security impact

Low — No known security impact.

repmgr systemctl (repmgr_systemctl )

Description

When repmgr services are detected, collects status and cat of the corresponding services. Checks for any service whose name starts with repmgr .

Report output

  • File /tools/repmgr/systemd/<service_name>_cat.data : Output of ’systemctl cat

  • File /tools/repmgr/systemd/<service_name>_status.data : Output of ’systemctl status

Depth

Surface

Security impact

Low — No known security impact.

xDB CLI (xdb_cli )

Description

xDB output from several CLI commands, from the running xDB publication and subscription server

Report output

  • Directory /tools/xdb/cli : xDB CLI print commands

Depth

Surface

Security impact

Low — No known security impact.

xDB configuration (xdb_configuration )

Description

xDB configuration files

Report output

  • File /tools/xdb/config/xdbReplicationServer.config : xDB startup configuration

  • File /tools/xdb/config/edb-repl.conf : xDB replication configuration

  • File /tools/xdb/config/xdb_subserver.conf : xDB subscription server configuration

  • File /tools/xdb/config/xdb_pubserver.conf : xDB publication server configuration

Depth

Surface

Security impact

Low — No known security impact.

xDB systemctl (xdb_systemctl )

Description

When xDB services are detected, collects status and cat of edb- xdbpubserver and edb-xdbsubserver

Report output

  • File /tools/xdb/systemd/<service_name>_cat.data : Output of systemctl cat <service_name>

  • File /tools/xdb/systemd/<service_name>_status.data : Output of systemctl status <service_name>

Depth

Surface

Security impact

Low — No known security impact.

Microsoft Windows operating system ### PEM configuration - Windows (pem_configuration_windows )

Description

PEM configuration files from PEM agent, PEM server, and PEM web server in a Windows environment

Report output

  • File /tools/pem/config/edb-ssl-pem.conf : PEM web server SSL configuration file

  • File /tools/pem/config/edb-pem.conf : PEM web server configuration file

  • File /tools/pem/config/pem.wsgi : PEM server WSGI definition file

  • File /tools/pem/config/agent.cfg : PEM agent configuration file

Depth

Surface

Security impact

Low — No known security impact.

PEM sc (pem_sc )

Description

When PEM is detected, collects PEM agent and PEM web server status and content

Report output

File /tools/pem/sc/<service_name>_query.data : Output of sc query <service_name>

Depth

Surface

Security impact

Low — No known security impact.

Disk information (win_disk_information )

Description

Disk and controller information from the system registry

Report output

  • File /windows/enum_ide.reg : Local machine ide device settings

  • File /windows/enum_scsi.reg : Local machine scsi device settings

Depth

Surface

Security impact

Low — No known security impact.

Hosts file (win_hosts )

Description

Host files and network-related information

Report output

  • File /windows/services.data : Windows services file

  • File /windows/protocol.data : Windows protocol file

  • File /windows/networks.data : Windows networks file

  • File /windows/hosts.sam : Windows hosts.sam file

  • File /windows/hosts.data : Windows hosts file

Depth

Surface

Security impact

Low — No known security impact.

MsInfo (win_msinfo )

Description

MsInfo32 report in NFO and TXT format

Report output

  • File /windows/msinfo_report.txt : Information from the MsInfo32 in textual format

  • File /windows/msinfo_report.nfo : Information from the MsInfo32 in NFO

Depth

Surface

Security impact

Low — No known security impact.

ODBC/64 (win_odbc32_info )

Description

ODBC configuration from the 64-bit registry section

Report output

  • File /windows/user_odbc_wow64.reg : User DSN list

  • File /windows/localmachine_odbcinst_wow64.reg : List of installed ODBC drivers

  • File /windows/localmachine_odbc_wow64.reg : System DSN list

Depth

Surface

Security impact

Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.

ODBC/32 (win_odbc64_info )

Description

ODBC configuration from the 32-bit registry section

Report output

  • File /windows/user_odbc.reg : User DSN list

  • File /windows/localmachine_odbcinst.reg : List of installed ODBC drivers

  • File /windows/localmachine_odbc.reg : System DSN list

Depth

Surface

Security impact

Medium — ODBC connection information can expose the presence of other databases or connection information to Postgres that can be used to attack the system.

systeminfo (win_systeminfo )

Description

Output of the systeminfo command

Report output

File /windows/systeminfo_report.txt : Information from the systeminfo command

Depth

Surface

Security impact

Low — No known security impact.

Disk volumes (win_volumes )

Description

Volume list from WMI

Report output

  • File /windows/association_structure : Association between drive letters and physical drives

  • File /windows/volume_disk : Volume list from the WMI subsystem

  • File /windows/logical_disk_list : Logical disk list from the WMI subsystem

  • File /windows/disk_partition_list : Disk partition list from the WMI subsystem

  • File /windows/disk_drive_list : Disk list from the WMI subsystem

Depth

Surface

Security impact

Low — No known security impact.

xDB CLI - Windows (xdb_cli_windows )

Description

xDB output from several CLI commands, from the running xDB publication and subscription server

Report output

  • Directory /tools/xdb/cli : xDB CLI print commands

Depth

Surface

Security impact

Low — No known security impact.

xDB configuration - Windows (xdb_configuration_windows )

Description

xDB configuration files

Report output

  • File /tools/xdb/config/xdbReplicationServer.config : xDB startup configuration`

  • File /tools/xdb/config/edb-repl.conf : xDB replication configuration`

  • File /tools/xdb/config/xdb_subserver.conf : xDB subscription server configuration

  • File /tools/xdb/config/xdb_pubserver.conf : xDB publication server configuration

Depth

Surface

Security impact

Low — No known security impact.

xDB sc (xdb_sc )

Description

When xDB is detected, collects xDB Publication and Subscription server status

Report output

File /tools/xdb/sc/<service_name>_query.data : Output of ’sc query

Depth

Surface

Security impact

Low — No known security impact.

PostgreSQL/PGD3 nstance ### Current archiver stats (postgresql_archiver )

Description

Statistics about the archiver process’s activity from pg_stat_archiver

Report output

File postgresql/archiver.out

Depth

Surface

Security impact

Low — No known security impact.

Available extensions (postgresql_available_extensions )

Description

List of extensions available on the server

Report output

File postgresql/available_extensions.out

Depth

Surface

Security impact

Low — No known security impact.

Current bg_writer stats (postgresql_bgwriter )

Description

Statistics about the background writer process’s activity from pg_stat_bgwriter

Report output

File postgresql/bgwriter.out

Depth

Surface

Security impact

Low — No known security impact.

Directory with binaries (postgresql_bin_dir )

Description

PostgreSQL binary directory

Report output

File /postgresql/postgresql_bin_path.data : Path to the Postgres bin directory

Depth

Surface

Security impact

Low — No known security impact.

Current configuration (postgresql_configuration )

Description

Postgres current configuration

Report output

File postgresql/configuration.out

Depth

Surface

Security impact

Medium — postgresql.conf might contain bad security policies

Configuration files (postgresql_configuration_files )

Description

Postgres configuration files and the data directory path. Passwords contained in well-known connection strings are redacted for information security reasons.

Report output

  • File /postgresql/pg_ident.conf : Postgres ident configuration file

  • File /postgresql/pg_hba.conf : Postgres host-based authentication file

  • File /postgresql/postgresql.auto.conf : Postgres auto configuration file

  • File /postgresql/recovery.done : Postgres recovery.done file

  • File /postgresql/recovery.conf : Postgres recovery.conf file

  • File /postgresql/postgresql.conf : Postgres configuration file

Depth

Surface

Security impact

Medium — pg_hba.conf and pg_ident.conf might expose potential security holes, such as trusted connections.

Databases (postgresql_databases )

Description

List of databases in the Postgres node

Report output

File postgresql/databases.out

Depth

Surface

Security impact

Low — No known security impact.

postgresql_db_bdr_tables_and_views (postgresql_db_bdr_tables_and_views )

Description

Collects all the tables and views of the BDR extension, except for:

  • bdr.apply_log

  • bdr.conflict_history

  • bdr.consensus_kv_data

  • bdr.internal_node_pre_commit

  • bdr.replication_status

  • bdr.state_journal

  • bdr.stat_activity

Report output

File /postgresql/dbs/<dbname>/bdr/* : Content of all tables under the BDR schema

Depth

Shallow

Security impact

Low — No known security impact.

postgresql_db_pglogical_tables_and_views (postgresql_db_pglogical_tables_and_views )

Description

Collects all the tables and views of the pglogical extension

Report output

File /postgresql/dbs/<dbname>/pglogical/* : Content of all tables under the pglogical schema

Depth

Shallow

Security impact

Low — No known security impact.

Database/Role Setting (postgresql_db_role_setting )

Description

List of database/role settings in the Postgres node

Report output

File postgresql/db_role_setting.out

Depth

Shallow

Security impact

Low — No known security impact.

Node and snapshot data (postgresql_node )

Description

Information about the running Postgres node

Report output

File postgresql/node.out

Depth

Surface

Security impact

Low — No known security impact.

pg_config (postgresql_pg_config )

Description

Postgres pg_config command output

Report output

File /postgresql/pg_config.data : pg_config command output

Depth

Surface

Security impact

Low — No known security impact.

pg_controldata (postgresql_pg_controldata )

Description

Postgres pg_controldata information

Report output

File /postgresql/pg_controldata.data : pg_controldata command output

Depth

Surface

Security impact

Low — No known security impact.

Version (postgresql_pg_version )

Description

Postgres client and server version

Report output

  • File /postgresql/postgresql_server_version.data : Postgres server version

  • File /postgresql/postgresql_client_version.data : Postgres client version

Depth

Surface

Security impact

Low — No known security impact.

Current pg_prepared_xacts contents (postgresql_prepared_xacts )

Description

Status of prepared xacts from pg_prepared_xacts

Report output

File postgresql/prepared_xacts.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_replication_origin_status contents (postgresql_replication_origin )

Description

Status of replication origins from pg_replication_origin_status

Report output

File postgresql/replication_origins.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_replication_slots contents (postgresql_replication_slots )

Description

Replication slots from pg_replication_slots

Report output

File postgresql/replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

Roles (postgresql_roles )

Description

Database roles from pg_roles

Report output

File postgresql/roles.out

Depth

Shallow

Security impact

Medium — pg_roles might contain bad security policies

Current activity stats (postgresql_running_activity )

Description

Information related to the current activity on running processes from pg_stat_activity

Report output

File postgresql/running_activity.out

Depth

Shallow

Security impact

Low — queries in pg_stat_activity could contain user names and application names.

Active locks (postgresql_running_locks )

Description

List of active locks

Report output

File postgresql/running_locks.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_shmem_allocations contents (postgresql_shmem_allocations )

Description

Status of shared memory allocations from pg_shmem_allocations

Report output

File postgresql/shmem_allocations.out

Depth

Surface

Security impact

Low — No known security impact.

Current pg_stat_replication contents (postgresql_stat_replication )

Description

Replication connections from pg_stat_replication

Report output

File postgresql/replication.out

Depth

Surface

Security impact

Low — No known security impact.

Server subscription statistics (postgresql_subscription_statistics )

Description

Statistics of subscriptions

Report output

File postgresql/subscription_statistics.out

Depth

Shallow

Security impact

Low — No known security impact.

Server subscriptions (postgresql_subscriptions )

Description

List of subscriptions

Report output

File postgresql/subscriptions.out

Depth

Shallow

Security impact

Low — No known security impact.

Tablespaces (postgresql_tablespaces )

Description

Tablespaces information and location

Report output

File postgresql/tablespaces.out

Depth

Surface

Security impact

Low — No known security impact.

Details for every Postgres/BDR3 database ### PGD1 replication slots (postgresql_db_bdr1_replication_slots )

Description

List of replication slots with 9.6 format for PGD1

Report output

File bdr1_replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

PGD2 replication slots (postgresql_db_bdr2_replication_slots )

Description

List of replication slots with 9.6 format for PGD2

Report output

File bdr2_replication_slots.out

Depth

Surface

Security impact

Low — No known security impact.

PGD conflict_history_summary aggregation (postgresql_db_bdr3_conflict_history_summary_agg )

Description

Collects aggregate count for all types of conflicts

Report output

File bdr_conflict_history_summary_agg.out

Depth

Surface

Security impact

Low — No known security impact.

PGD current activity stats (postgresql_db_bdr3_stat_activity )

Description

Information related to the current activity on running processes from bdr.stat_activity

Report output

File bdr_stat_activity.out

Depth

Shallow

Security impact

Low — queries in bdr.stat_activity could contain user names and application names.

PGD sequences (postgresql_db_bdr_sequences )

Description

List of the PGD sequences

Report output

File bdr_sequences.out

Depth

Surface

Security impact

Low — No known security impact.

PGD version (postgresql_db_bdr_version )

Description

Currently used version of PGD

Report output

File bdr_version.out

Depth

Surface

Security impact

Low — No known security impact.

Database extensions (postgresql_db_extensions )

Description

List of extensions in the database

Report output

File extensions.out

Depth

Shallow

Security impact

Low — No known security impact.

Database indexes (postgresql_db_indexes )

Description

List of indexes in the database

Report output

File indexes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database procedural languages (postgresql_db_languages )

Description

Procedural languages in the database

Report output

File language.out

Depth

Shallow

Security impact

Low — No known security impact.

PGD monitor_group_raft (postgresql_db_monitor_group_raft )

Description

Check the raft status in the bdr cluster

Report output

File bdr_monitor_group_raft.out

Depth

Surface

Security impact

Low — No known security impact.

PGD monitor_group_versions (postgresql_db_monitor_group_versions )

Description

Check the version of all PGD nodes

Report output

File bdr_monitor_group_versions.out

Depth

Surface

Security impact

Low — No known security impact.

PGD monitor_local_replslots (postgresql_db_monitor_local_replslots )

Description

Checks all the replication slot status

Report output

File bdr_monitor_local_replslots.out

Depth

Surface

Security impact

Low — No known security impact.

Database operators (postgresql_db_operators )

Description

Operators in the database

Report output

File operator.out

Depth

Shallow

Security impact

Low — No known security impact.

Database partitioned tables (postgresql_db_partitioned_tables )

Description

Information about partitioned tables using declarative partitioning

Report output

File partitioned_table.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent table tuples (postgresql_db_pem_agent )

Description

Data from metatable pem.agent

Report output

File pem_agent.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_config table tuples (postgresql_db_pem_agent_config )

Description

Data from metatable pem.agent_config

Report output

File pem_agent_config.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_heartbeat table tuples (postgresql_db_pem_agent_heartbeat )

Description

Data from metatable pem.agent_heartbeat

Report output

File pem_agent_heartbeat.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.agent_server_binding table tuples (postgresql_db_pem_agent_server_binding )

Description

Data from metatable pem.agent_server_binding

Report output

File pem_agent_server_binding.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.config table tuples (postgresql_db_pem_config )

Description

Data from metatable pem.config

Report output

File pem_config.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.email_group table tuples (postgresql_db_pem_email_group )

Description

Data from metatable pem.email_group

Report output

File pem_email_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.email_group_option table tuples (postgresql_db_pem_email_group_option )

Description

Data from metatable pem.email_group_option

Report output

File pem_email_group_option.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.probe table tuples (postgresql_db_pem_probe )

Description

Data from metatable pem.probe

Report output

File pem_probe.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.probe_schedule table tuples (postgresql_db_pem_probe_schedule )

Description

Data from metatable pem.probe_schedule

Report output

File pem_probe_schedule.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.schema_version() output (postgresql_db_pem_schema_version )

Description

Output from function pem.schema_version()

Report output

File pem_schema_version.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.server table tuples (postgresql_db_pem_server )

Description

Data from metatable pem.server

Report output

File pem_server.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.server_heartbeat table tuples (postgresql_db_pem_server_heartbeat )

Description

Data from metatable pem.server_heartbeat

Report output

File pem_server_heartbeat.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.smtp_spool table tuples (postgresql_db_pem_smtp_spool )

Description

Data from metatable pem.smtp_spool

Report output

File pem_smtp_spool.out

Depth

Shallow

Security impact

Low — No known security impact.

Database PEM pem.snmp_spool table tuples (postgresql_db_pem_snmp_spool )

Description

Data from metatable pem.snmp_spool

Report output

File pem_snmp_spool.out

Depth

Shallow

Security impact

Low — No known security impact.

Pglogical subscription status (postgresql_db_pglogical_subscription_status )

Description

List of tables replicated by pglogical

Report output

File pglogical_subscription_status.out

Depth

Surface

Security impact

Low — No known security impact.

Database functions (postgresql_db_procs )

Description

Functions in the database

Report output

File proc.out

Depth

Shallow

Security impact

Low — No known security impact.

Database publication tables (postgresql_db_publication_tables )

Description

List of tables of publications of the database

Report output

File publication_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database publications (postgresql_db_publications )

Description

List of publications of the database

Report output

File publications.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.events table tuples (postgresql_db_repmgr_events )

Description

Data from metatable repmgr.events

Report output

File repmgr/events.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.monitoring_history table tuples (postgresql_db_repmgr_monitoring_history )

Description

Data from metatable repmgr.monitoring_history

Report output

File repmgr/monitoring_history.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.nodes table tuples (postgresql_db_repmgr_nodes )

Description

Data from metatable repmgr.nodes

Report output

File repmgr/nodes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.replication_status table tuples (postgresql_db_repmgr_replication_status )

Description

Data from metatable repmgr.replication_status

Report output

File repmgr/replication_status.out

Depth

Shallow

Security impact

Low — No known security impact.

Database repmgr repmgr.show_nodes table tuples (postgresql_db_repmgr_show_nodes )

Description

Data from metatable repmgr.show_nodes

Report output

File repmgr/show_nodes.out

Depth

Shallow

Security impact

Low — No known security impact.

Database schema (postgresql_db_schemas )

Description

List of schemas in the database

Report output

File schemas.out

Depth

Shallow

Security impact

Low — No known security impact.

Database statistics (postgresql_db_statistics )

Description

Statistics of the database

Report output

File statistics.out

Depth

Deep

Security impact

Low — No known security impact.

Database subscription tables (postgresql_db_subscription_tables )

Description

List of tables of subscriptions of the database

Report output

File subscription_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database tables (postgresql_db_tables )

Description

List of tables in the database

Report output

File tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database types (postgresql_db_types )

Description

Types in the database

Report output

File type.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_mmr_pub_group table tuples (postgresql_db_xdb_mmr_pub_group )

Description

Data from metatable _edb_replicator_pub.xdb_mmr_pub_group

Report output

File xdb_mmr_pub_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_pub_database table tuples (postgresql_db_xdb_pub_database )

Description

Data from metatable _edb_replicator_pub.xdb_pub_database

Report output

File xdb_pub_database.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_pub_replog table tuples (postgresql_db_xdb_pub_replog )

Description

Last 50 rows from metatable _edb_replicator_pub.xdb_pub_replog

Report output

File xdb_pub_replog.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_publication_subscriptionstable tuples (postgresql_db_xdb_publication_subscriptions )

Description

Data from metatable _edb_replicator_pub.xdb_publication_subscriptions

Report output

File xdb_publication_subscriptions.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.xdb_publications table tuples (postgresql_db_xdb_publications )

Description

Data from metatable _edb_replicator_pub.xdb_publications

Report output

File xdb_publications.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_mmr_pub_group table tuples (postgresql_db_xdb_rrep_mmr_pub_group )

Description

Data from metatable _edb_replicator_pub.rrep_mmr_pub_group

Report output

File xdb_rrep_mmr_pub_group.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_mmr_txset table tuples (postgresql_db_xdb_rrep_mmr_txset )

Description

Last 10 rows from metatable _edb_replicator_pub.rrep_mmr_txset

Report output

File xdb_rrep_mmr_txset.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_properties table tuples (postgresql_db_xdb_rrep_properties )

Description

Data from from metatable _edb_replicator_pub.rrep_properties

Report output

File xdb_rrep_properties.out

Depth:** shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_publication_tablestable tuples (postgresql_db_xdb_rrep_publication_tables )

Description

Data from metatable _edb_replicator_pub.rrep_publication_tables

Report output

File xdb_rrep_publication_tables.out

Depth

Shallow

Security impact

Low — No known security impact.

Database xDB _edb_replicator_pub.rrep_txset table tuples (postgresql_db_xdb_rrep_txset )

Description

Data from metatable _edb_replicator_pub.rrep_txset

Report output

File xdb_pub_rrep_txset.out

Depth

Shallow

Security impact

Low — No known security impact.

Barman (Backup and Recovery Manager) ### Barman check (barman_check )

Description

Collects the status of the Barman check framework for all configured servers

Report output

File /barman/barman_check.data : Output of barman check

Depth

Surface

Security impact

Low — No known security impact.

Barman diagnose (barman_diagnose )

Description

Collects the barman diagnosis information

Report output

File /barman/diagnose.data : Output from ‘barman diagnose’

Depth

Surface

Security impact

Low — No known security impact.

Barman executable location (barman_executable )

Description

Collects the barman executable location

Report output

File /barman/barman_location.data : The path of the main barman executable

Depth

Surface

Security impact

Low — No known security impact.

Barman module location (barman_modules_path )

Description

Collects the location of the barman Python modules

Report output

File /barman/barman_python_verbose.data : The list of Barman python modules

Depth

Surface

Security impact

Low — No known security impact.