DISA_STIG_Oracle_MySQL_8.0_v1r5_OS_Linux.audit from DISA Oracle MySQL 8.0 v1r5 STIG

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred.

CAT|II

CCI|CCI-000130

Rule-ID|SV-235097r879563_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-001200 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-235099r879576_rule

STIG-ID|MYS8-00-001200

Vuln-ID|V-235099

MYS8-00-001300 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-235100r879577_rule

STIG-ID|MYS8-00-001300

Vuln-ID|V-235100

MYS8-00-001400 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-235101r879578_rule

STIG-ID|MYS8-00-001400

Vuln-ID|V-235101

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-235105r879561_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-235106r879561_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.

Rule-ID|SV-235107r879863_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-235108r879863_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed.

Rule-ID|SV-235109r879865_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235110r879865_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified.

Rule-ID|SV-235115r879867_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-235116r879867_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.

CAT|I

CCI|CCI-000186

Rule-ID|SV-235135r879613_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-007800 - The MySQL Database Server 8.0 must initiate session auditing upon startup.

CCI|CCI-001464

Rule-ID|SV-235159r879562_rule

STIG-ID|MYS8-00-007800

Vuln-ID|V-235159

MYS8-00-009200 - The MySQL Database Server 8.0 must enforce access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s).

CCI|CCI-001813

Rule-ID|SV-235169r879753_rule

STIG-ID|MYS8-00-009200

Vuln-ID|V-235169

MYS8-00-011500 - The MySQL Database Server 8.0 must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements.

CCI|CCI-002450

Rule-ID|SV-235187r917659_rule

STIG-ID|MYS8-00-011500

Vuln-ID|V-235187

MYS8-00-011900 - The MySQL Database Server 8.0 must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

Detections

Analytics

DISA Oracle MySQL 8.0 v1r5 OS Linux

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Aug 26, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Jun 17, 2024 Miscellaneous Metadata updated.