| If category tracking is not required in the database, this is not applicable. |
First, as the database administrator, verify pgaudit is enabled by running the following SQL:
$ sudo su - postgres
$ psql -c "SHOW shared_preload_libraries"
If the output does not contain pgaudit, this is a finding.
Next, verify that role, read, write, and ddl auditing are enabled:
$ psql -c "SHOW pgaudit.log"
If the output does not contain role, read, write, and ddl, this is a finding.