Detections
Analytics
MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.
Information
Changes to the security configuration must be tracked.This requirement applies to situations where security data is retrieved or modified via data manipulation operations, as opposed to via specialized security functionality.
In a SQL environment, types of access include, but are not necessarily limited to:
SELECT
INSERT
UPDATE
DELETE
EXECUTE
To aid in diagnosis, it is necessary to keep track of failed attempts in addition to the successful ones.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
If currently required, configure the MySQL Database Server to produce audit records when unsuccessful attempts to retrieve privileges/permissions occur.See the supplemental file 'MySQL80Audit.sql'.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_MySQL_8-0_V2R2_STIG.zip
Item Details
Audit Name: DISA Oracle MySQL 8.0 v2r2 DB
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-12c., CAT|II, CCI|CCI-000172, Rule-ID|SV-235108r961791_rule, STIG-ID|MYS8-00-002100, Vuln-ID|V-235108
Plugin: MySQLDB
Control ID: 21a3a332ab4242d329ea6df3f08b09edc40b17f185de8b39b4aa7e8ccbf21912