Detections
Analytics

1.67 MADB-10-008100

Information

MariaDB must disable network functions, ports, protocols, and services deemed by the organization to be nonsecure, in accord with the Ports, Protocols, and Services Management (PPSM) guidance.

GROUP ID: V-253734
RULE ID: SV-253734r961470

Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.

Solution

To verify that mariadb system denies specific network functions, locate cnf file and specifically bind ip address to deny (or port):

$ ls -la /etc | grep my.cnf
-rw-r--r--. 1 root root 301 Aug 25 12:45 my.cnf
bind-address = 127.0.0.1 #just an example

To specifically change default port (3306) is something different:

port = 1234
bind = 10.10.10.10 #as an example

After making changes to the .cnf file, stop and restart the database service.

See Also

https://workbench.cisecurity.org/benchmarks/26720

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(1), CCI|CCI-001762, Rule-ID|SV-253734r961470_rule, STIG-ID|MADB-10-008100, Vuln-ID|V-253734

Plugin: MySQLDB

Control ID: 471f91422b478ed904e7742c779c8c6856dd4fcc5ee69498ec2ad045f15080a3