SEC - 安全

安全功能扩展:强制密码强度,阉割超级用户,密钥管理,商密算法,PII匿名处理,扩展白名单,审计日志,变更追溯,反病毒等等

扩展列表

共有 28 个扩展,位于 28 个扩展包中。

扩展版本许可证语言描述
passwordcheck_cracklibpasswordcheck_cracklib3.1.0LGPL-2.1C使用cracklib加固PG用户密码
supautilssupautils3.1.0Apache-2.0C用于在云环境中确保数据库集群的安全
pgsodiumpgsodium3.1.9BSD 3-ClauseC表数据加密存储 TDE
supabase_vaultpg_vault0.3.1Apache-2.0C在 Vault 中存储加密凭证的扩展 (supabase)
pg_session_jwtpg_session_jwt0.4.0Apache-2.0Rust使用JWT进行会话认证
anonpg_anon3.0.1PostgreSQLRust数据匿名化处理工具
pgsmcryptopgsmcrypto0.1.1MITRust为PostgreSQL提供商密算法支持:SM2,SM3,SM4
pg_enigmapg_enigma0.5.0MITRustPostgreSQL 加密数据类型
pgauditpgaudit18.0PostgreSQLC提供审计功能
pgauditlogtofilepgauditlogtofile1.8.0PostgreSQLCpgAudit 子扩展,将审计日志写入单独的文件中
pg_auditorpg_auditor0.2BSD 3-ClauseSQL审计数据变更并提供闪回能力
logerrorslogerrors2.1.5BSD 3-ClauseC用于收集日志文件中消息统计信息的函数
pg_auth_monpg_auth_mon3.0MITC监控每个用户的连接尝试
pg_jobmonpg_jobmon1.4.1PostgreSQLSQL记录和监控函数
credcheckcredcheck4.6MITC明文凭证检查器
pgcryptokeypgcryptokey0.85PostgreSQLCPG密钥管理
pg_pwhashpg_pwhash1.0MITCPostgreSQL 高级密码哈希扩展(Argon2/scrypt/yescrypt)
login_hooklogin_hook1.7GPL-3.0C在用户登陆时执行login_hook.login()函数
set_userset_user4.2.0PostgreSQLC增加了日志记录的 SET ROLE
pg_snakeoilpg_snakeoil1.4PostgreSQLCPostgreSQL动态链接库反病毒功能
pgextwlistpgextwlist1.19PostgreSQLCPostgreSQL扩展白名单功能
sslutilssslutils1.4PostgreSQLC使用SQL管理SSL证书
nosetpg_noset0.3.0AGPL-3.0C阻止非超级用户使用SET/RESET设置变量
pg_tdepg_tde2.1MITCPercona加密存储引擎
sepgsqlsepgsql-PostgreSQLC基于SELinux标签的强制访问控制
auth_delayauth_delay-PostgreSQLC在返回认证失败前暂停一会,避免爆破
pgcryptopgcrypto1.3PostgreSQLC实用加解密函数
passwordcheckpasswordcheck-PostgreSQLC用于强制拒绝修改弱密码的扩展

passwordcheck_cracklib

passwordcheck_cracklib - 3.1.0 : 使用cracklib加固PG用户密码

条目属性OSx86_64aarch64
扩展名passwordcheck_cracklibel818171615141817161514
扩展包passwordcheck_cracklibel918171615141817161514
RPMpasswordcheck_cracklib_$vel1018171615141817161514
DEBpostgresql-$v-passwordcheck-cracklibd1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议LGPL-2.1u2418171615141817161514

supautils

supautils - 3.1.0 : 用于在云环境中确保数据库集群的安全

条目属性OSx86_64aarch64
扩展名supautilsel818171615141817161514
扩展包supautilsel918171615141817161514
RPMsupautils_$vel1018171615141817161514
DEBpostgresql-$v-supautilsd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议Apache-2.0u2418171615141817161514

pgsodium

pgsodium - 3.1.9 : 表数据加密存储 TDE

条目属性OSx86_64aarch64
扩展名pgsodiumel818171615141817161514
扩展包pgsodiumel918171615141817161514
RPMpgsodium_$vel1018171615141817161514
DEBpostgresql-$v-pgsodiumd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议BSD 3-Clauseu2418171615141817161514

supabase_vault

pg_vault - 0.3.1 : 在 Vault 中存储加密凭证的扩展 (supabase)

条目属性OSx86_64aarch64
扩展名supabase_vaultel818171615141817161514
扩展包pg_vaultel918171615141817161514
RPMvault_$vel1018171615141817161514
DEBpostgresql-$v-vaultd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议Apache-2.0u2418171615141817161514

pg_session_jwt

pg_session_jwt - 0.4.0 : 使用JWT进行会话认证

条目属性OSx86_64aarch64
扩展名pg_session_jwtel818171615141817161514
扩展包pg_session_jwtel918171615141817161514
RPMpg_session_jwt_$vel1018171615141817161514
DEBpostgresql-$v-pg-session-jwtd1218171615141817161514
语言Rustd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议Apache-2.0u2418171615141817161514

anon

pg_anon - 3.0.1 : 数据匿名化处理工具

条目属性OSx86_64aarch64
扩展名anonel818171615141817161514
扩展包pg_anonel918171615141817161514
RPMpg_anon_$vel1018171615141817161514
DEBpostgresql-$v-pg-anond1218171615141817161514
语言Rustd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pgsmcrypto

pgsmcrypto - 0.1.1 : 为PostgreSQL提供商密算法支持:SM2,SM3,SM4

条目属性OSx86_64aarch64
扩展名pgsmcryptoel818171615141817161514
扩展包pgsmcryptoel918171615141817161514
RPMpgsmcrypto_$vel1018171615141817161514
DEBpostgresql-$v-pgsmcryptod1218171615141817161514
语言Rustd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议MITu2418171615141817161514

pg_enigma

pg_enigma - 0.5.0 : PostgreSQL 加密数据类型

条目属性OSx86_64aarch64
扩展名pg_enigmael818171615141817161514
扩展包pg_enigmael918171615141817161514
RPMpg_enigma_$vel1018171615141817161514
DEBpostgresql-$v-enigmad1218171615141817161514
语言Rustd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议MITu2418171615141817161514

pgaudit

pgaudit - 18.0 : 提供审计功能

条目属性OSx86_64aarch64
扩展名pgauditel818171615141817161514
扩展包pgauditel918171615141817161514
RPMpgaudit_$vel1018171615141817161514
DEBpostgresql-$v-pgauditd1218171615141817161514
语言Cd1318171615141817161514
仓库PGDGu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pgauditlogtofile

pgauditlogtofile - 1.8.0 : pgAudit 子扩展,将审计日志写入单独的文件中

条目属性OSx86_64aarch64
扩展名pgauditlogtofileel818171615141817161514
扩展包pgauditlogtofileel918171615141817161514
RPMpgauditlogtofile_$vel1018171615141817161514
DEBpostgresql-$v-pgauditlogtofiled1218171615141817161514
语言Cd1318171615141817161514
仓库PGDGu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pg_auditor

pg_auditor - 0.2 : 审计数据变更并提供闪回能力

条目属性OSx86_64aarch64
扩展名pg_auditorel818171615141817161514
扩展包pg_auditorel918171615141817161514
RPMpg_auditor_$vel1018171615141817161514
DEBpostgresql-$v-pg-auditord1218171615141817161514
语言SQLd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议BSD 3-Clauseu2418171615141817161514

logerrors

logerrors - 2.1.5 : 用于收集日志文件中消息统计信息的函数

条目属性OSx86_64aarch64
扩展名logerrorsel818171615141817161514
扩展包logerrorsel918171615141817161514
RPMlogerrors_$vel1018171615141817161514
DEBpostgresql-$v-logerrorsd1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议BSD 3-Clauseu2418171615141817161514

pg_auth_mon

pg_auth_mon - 3.0 : 监控每个用户的连接尝试

条目属性OSx86_64aarch64
扩展名pg_auth_monel818171615141817161514
扩展包pg_auth_monel918171615141817161514
RPMpg_auth_mon_$vel1018171615141817161514
DEBpostgresql-$v-pg-auth-mond1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议MITu2418171615141817161514

pg_jobmon

pg_jobmon - 1.4.1 : 记录和监控函数

条目属性OSx86_64aarch64
扩展名pg_jobmonel818171615141817161514
扩展包pg_jobmonel918171615141817161514
RPMpg_jobmon_$vel1018171615141817161514
DEBpostgresql-$v-pg-jobmond1218171615141817161514
语言SQLd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议PostgreSQLu2418171615141817161514

credcheck

credcheck - 4.6 : 明文凭证检查器

条目属性OSx86_64aarch64
扩展名credcheckel818171615141817161514
扩展包credcheckel918171615141817161514
RPMcredcheck_$vel1018171615141817161514
DEBpostgresql-$v-credcheckd1218171615141817161514
语言Cd1318171615141817161514
仓库PGDGu2218171615141817161514
协议MITu2418171615141817161514

pgcryptokey

pgcryptokey - 0.85 : PG密钥管理

条目属性OSx86_64aarch64
扩展名pgcryptokeyel818171615141817161514
扩展包pgcryptokeyel918171615141817161514
RPMpgcryptokey_$vel1018171615141817161514
DEBpostgresql-$v-pgcryptokeyd1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pg_pwhash

pg_pwhash - 1.0 : PostgreSQL 高级密码哈希扩展(Argon2/scrypt/yescrypt)

条目属性OSx86_64aarch64
扩展名pg_pwhashel818171615141817161514
扩展包pg_pwhashel918171615141817161514
RPMpg_pwhash_$vel1018171615141817161514
DEBpostgresql-$v-pg-pwhashd1218171615141817161514
语言Cd1318171615141817161514
仓库PGDGu2218171615141817161514
协议MITu2418171615141817161514

login_hook

login_hook - 1.7 : 在用户登陆时执行login_hook.login()函数

条目属性OSx86_64aarch64
扩展名login_hookel818171615141817161514
扩展包login_hookel918171615141817161514
RPMlogin_hook_$vel1018171615141817161514
DEBpostgresql-$v-login-hookd1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议GPL-3.0u2418171615141817161514

set_user

set_user - 4.2.0 : 增加了日志记录的 SET ROLE

条目属性OSx86_64aarch64
扩展名set_userel818171615141817161514
扩展包set_userel918171615141817161514
RPMset_user_$vel1018171615141817161514
DEBpostgresql-$v-set-userd1218171615141817161514
语言Cd1318171615141817161514
仓库PGDGu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pg_snakeoil

pg_snakeoil - 1.4 : PostgreSQL动态链接库反病毒功能

条目属性OSx86_64aarch64
扩展名pg_snakeoilel818171615141817161514
扩展包pg_snakeoilel918171615141817161514
RPMpg_snakeoil_$vel1018171615141817161514
DEBpostgresql-$v-snakeoild1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pgextwlist

pgextwlist - 1.19 : PostgreSQL扩展白名单功能

条目属性OSx86_64aarch64
扩展名pgextwlistel818171615141817161514
扩展包pgextwlistel918171615141817161514
RPMpgextwlist_$vel1018171615141817161514
DEBpostgresql-$v-pgextwlistd1218171615141817161514
语言Cd1318171615141817161514
仓库MIXEDu2218171615141817161514
协议PostgreSQLu2418171615141817161514

sslutils

sslutils - 1.4 : 使用SQL管理SSL证书

条目属性OSx86_64aarch64
扩展名sslutilsel818171615141817161514
扩展包sslutilsel918171615141817161514
RPMsslutils_$vel1018171615141817161514
DEBpostgresql-$v-sslutilsd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议PostgreSQLu2418171615141817161514

noset

pg_noset - 0.3.0 : 阻止非超级用户使用SET/RESET设置变量

条目属性OSx86_64aarch64
扩展名nosetel818171615141817161514
扩展包pg_nosetel918171615141817161514
RPMnoset_$vel1018171615141817161514
DEBpostgresql-$v-nosetd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议AGPL-3.0u2418171615141817161514

pg_tde

pg_tde - 2.1 : Percona加密存储引擎

条目属性OSx86_64aarch64
扩展名pg_tdeel818171615141817161514
扩展包pg_tdeel918171615141817161514
RPMpercona-postgresql$vel1018171615141817161514
DEBpercona-postgresql-$vd1218171615141817161514
语言Cd1318171615141817161514
仓库PIGSTYu2218171615141817161514
协议MITu2418171615141817161514

sepgsql

sepgsql - - : 基于SELinux标签的强制访问控制

条目属性OSx86_64aarch64
扩展名sepgsqlel818171615141817161514
扩展包sepgsqlel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
语言Cd1318171615141817161514
仓库CONTRIBu2218171615141817161514
协议PostgreSQLu2418171615141817161514

auth_delay

auth_delay - - : 在返回认证失败前暂停一会,避免爆破

条目属性OSx86_64aarch64
扩展名auth_delayel818171615141817161514
扩展包auth_delayel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
语言Cd1318171615141817161514
仓库CONTRIBu2218171615141817161514
协议PostgreSQLu2418171615141817161514

pgcrypto

pgcrypto - 1.3 : 实用加解密函数

条目属性OSx86_64aarch64
扩展名pgcryptoel818171615141817161514
扩展包pgcryptoel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
语言Cd1318171615141817161514
仓库CONTRIBu2218171615141817161514
协议PostgreSQLu2418171615141817161514

passwordcheck

passwordcheck - - : 用于强制拒绝修改弱密码的扩展

条目属性OSx86_64aarch64
扩展名passwordcheckel818171615141817161514
扩展包passwordcheckel918171615141817161514
RPMpostgresql$v-contribel1018171615141817161514
DEBpostgresql-$vd1218171615141817161514
语言Cd1318171615141817161514
仓库CONTRIBu2218171615141817161514
协议PostgreSQLu2418171615141817161514

最后修改 2026-03-08: add extension catalog (baacba6)