Detections
Analytics

7.2 Ensure appropriate database file permissions are set.

Information

MongoDB database files need to be protected using file permissions.

This will restrict unauthorized users from accessing the database.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set ownership of the database file to mongodb user and remove other permissions using the following commands:

chmod 770 /var/lib/mongodb
chown mongodb:mongodb /var/lib/mongodb

See Also

https://workbench.cisecurity.org/benchmarks/27511

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Windows

Control ID: 993a4b5858e86b30d36c96f87911008af655a8edaca6431aca99865202790dc1