DISA_STIG_MariaDB_Enterprise_10.x_v2r5_Unix.audit from DISA MariaDB Enterprise 10.x STIG v2r5

MADB-10-000800 - MariaDB must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

800-53|AU-12c.

CAT|II

CCI|CCI-000172

Rule-ID|SV-253673r960885_rule

STIG-ID|MADB-10-000800

Vuln-ID|V-253673

MADB-10-001700 - MariaDB must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.

800-53|AU-5b.

CCI|CCI-000140

Rule-ID|SV-253677r1043188_rule

STIG-ID|MADB-10-001700

Vuln-ID|V-253677

MADB-10-002700 - The MariaDB software installation account must be restricted to authorized users.

800-53|CM-5(6)

CAT|I

CCI|CCI-001499

Rule-ID|SV-253686r960960_rule

STIG-ID|MADB-10-002700

Vuln-ID|V-253686

MADB-10-002800 - Database software, including MariaDB configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

Rule-ID|SV-253687r960960_rule

STIG-ID|MADB-10-002800

Vuln-ID|V-253687

MADB-10-003800 - If passwords are used for authentication, MariaDB must store only hashed, salted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000196

CCI|CCI-004062

Rule-ID|SV-253697r1018600_rule

STIG-ID|MADB-10-003800

Vuln-ID|V-253697

MADB-10-004100 - MariaDB must enforce authorized access to all PKI private keys stored/used by the DBMS.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-253700r961041_rule

STIG-ID|MADB-10-004100

Vuln-ID|V-253700

MADB-10-004300 - MariaDB must obscure feedback of authentication information during the authentication process to protect the information from possible exploitation/use by unauthorized individuals.

800-53|IA-6

CCI|CCI-000206

Rule-ID|SV-253702r961047_rule

STIG-ID|MADB-10-004300

Vuln-ID|V-253702

MADB-10-004400 - MariaDB must use NIST FIPS 140-2/140-3 validated cryptographic modules for cryptographic operations.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-253703r1136902_rule

STIG-ID|MADB-10-004400

Vuln-ID|V-253703

MADB-10-005400 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data-transfer policy.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-253711r1137656_rule

STIG-ID|MADB-10-005400

Vuln-ID|V-253711

MADB-10-005500 - MariaDB must prevent unauthorized and unintended information transfer via shared system resources.

Rule-ID|SV-253712r1137657_rule

STIG-ID|MADB-10-005500

Vuln-ID|V-253712

MADB-10-005600 - Access to database files must be limited to relevant processes and to authorized, administrative users.

Rule-ID|SV-253713r1137658_rule

STIG-ID|MADB-10-005600

Vuln-ID|V-253713

MADB-10-005900 - MariaDB and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-253716r961158_rule

STIG-ID|MADB-10-005900

Vuln-ID|V-253716

MADB-10-007400 - MariaDB must provide a warning to appropriate support staff when allocated audit record storage volume reaches 75 percent of maximum audit record storage capacity.

800-53|AU-5(1)

CCI|CCI-001855

Rule-ID|SV-253728r961398_rule

STIG-ID|MADB-10-007400

Vuln-ID|V-253728

MADB-10-007500 - MariaDB must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-253729r961401_rule

STIG-ID|MADB-10-007500

Vuln-ID|V-253729

MADB-10-008000 - MariaDB must produce audit records of its enforcement of access restrictions associated with changes to the configuration of the DBMS or database(s).

800-53|CM-5(1)

CCI|CCI-001814

CCI|CCI-003938

Rule-ID|SV-253733r1018602_rule

STIG-ID|MADB-10-008000

Vuln-ID|V-253733

MADB-10-008500 - MariaDB must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

800-53|SC-23(5)

CCI|CCI-002470

Rule-ID|SV-253738r1193220_rule

STIG-ID|MADB-10-008500

Vuln-ID|V-253738

MADB-10-009200 - When updates are applied to the MariaDB software, any software components that have been replaced or made unnecessary must be removed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-253744r961677_rule

STIG-ID|MADB-10-009200

Vuln-ID|V-253744

MADB-10-009300 - Security-relevant software updates to MariaDB must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

800-53|SI-2c.

CCI|CCI-002605

Rule-ID|SV-253745r1137667_rule

STIG-ID|MADB-10-009300

Vuln-ID|V-253745

MADB-10-012400 - MariaDB must off-load audit data to a separate log management facility; this must be continuous and in near real time for systems with a network connection to the storage facility and weekly or more often for stand-alone systems.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-253776r961860_rule

STIG-ID|MADB-10-012400

Vuln-ID|V-253776

Detections

Analytics

DISA MariaDB Enterprise 10.x STIG v2r5 Unix

Audit Details

File Details

Audit Changelog

No revisions found