DISA_STIG_Oracle_MySQL_8.0_v1r3_OS_Linux.audit from DISA Oracle MySQL 8.0 v1r3 STIG

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred - audit.log

CAT|II

CCI|CCI-000130

Rule-ID|SV-235097r623413_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred - data directory

MYS8-00-001200 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access - audit.log

CCI|CCI-000162

Rule-ID|SV-235099r623419_rule

STIG-ID|MYS8-00-001200

Vuln-ID|V-235099

MYS8-00-001200 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access - data directory

MYS8-00-001300 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification - audit.log

CCI|CCI-000163

Rule-ID|SV-235100r623422_rule

STIG-ID|MYS8-00-001300

Vuln-ID|V-235100

MYS8-00-001300 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification - data directory

MYS8-00-001400 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion - audit.log

CCI|CCI-000164

Rule-ID|SV-235101r623425_rule

STIG-ID|MYS8-00-001400

Vuln-ID|V-235101

MYS8-00-001400 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion - data directory

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-235105r623437_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-235106r623440_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.

Rule-ID|SV-235107r623443_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-235108r623446_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed.

Rule-ID|SV-235109r623449_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235110r623452_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified - audit_log

Rule-ID|SV-235115r623467_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-235116r623470_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0 - private pem files

CAT|I

CCI|CCI-000186

Rule-ID|SV-235135r863348_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0 - public pem files

MYS8-00-007800 - The MySQL Database Server 8.0 must initiate session auditing upon startup - audit-log

CCI|CCI-001464

Rule-ID|SV-235159r623599_rule

STIG-ID|MYS8-00-007800

Vuln-ID|V-235159

MYS8-00-007800 - The MySQL Database Server 8.0 must initiate session auditing upon startup - plugin-load-add

MYS8-00-009200 - The MySQL Database Server 8.0 must enforce access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s) - auto.cnf

CCI|CCI-001813

Rule-ID|SV-235169r855567_rule

STIG-ID|MYS8-00-009200

Vuln-ID|V-235169

MYS8-00-009200 - The MySQL Database Server 8.0 must enforce access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s) - my.cnf

MYS8-00-011500 - The MySQL Database Server 8.0 must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements - tls_ciphersuites TLSv1.3

CCI|CCI-002450

Rule-ID|SV-235187r863354_rule

STIG-ID|MYS8-00-011500

Vuln-ID|V-235187

MYS8-00-011900 - The MySQL Database Server 8.0 must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

Detections

Analytics

DISA Oracle MySQL 8.0 v1r3 OS Linux

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.3 Oct 17, 2023 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.2 Apr 12, 2023 Miscellaneous Metadata updated. Platform check updated.
Revision 1.1 Mar 7, 2023 Miscellaneous Metadata updated. References updated.