DISA_STIG_Oracle_MySQL_8.0_v2r1_OS_Linux.audit from DISA Oracle MySQL 8.0 v2r1 STIG

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred.

800-53|AU-3

CAT|II

CCI|CCI-000130

Rule-ID|SV-235097r960891_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-001200 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access.

800-53|AU-9

CCI|CCI-000162

Rule-ID|SV-235099r960930_rule

STIG-ID|MYS8-00-001200

Vuln-ID|V-235099

MYS8-00-001300 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-235100r960933_rule

STIG-ID|MYS8-00-001300

Vuln-ID|V-235100

MYS8-00-001400 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-235101r960936_rule

STIG-ID|MYS8-00-001400

Vuln-ID|V-235101

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-235105r960885_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-235106r960885_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.

Rule-ID|SV-235107r961791_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-235108r961791_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed.

Rule-ID|SV-235109r961797_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235110r961797_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified.

Rule-ID|SV-235115r961803_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-235116r961803_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.

800-53|IA-5(2)(b)

CAT|I

CCI|CCI-000186

Rule-ID|SV-235135r961041_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-007800 - The MySQL Database Server 8.0 must initiate session auditing upon startup.

800-53|AU-14(1)

CCI|CCI-001464

Rule-ID|SV-235159r960888_rule

STIG-ID|MYS8-00-007800

Vuln-ID|V-235159

MYS8-00-009200 - The MySQL Database Server 8.0 must enforce access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s).

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-235169r961461_rule

STIG-ID|MYS8-00-009200

Vuln-ID|V-235169

MYS8-00-011500 - The MySQL Database Server 8.0 must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements.

800-53|SC-13

CCI|CCI-002450

Rule-ID|SV-235187r962034_rule

STIG-ID|MYS8-00-011500

Vuln-ID|V-235187

MYS8-00-011900 - The MySQL Database Server 8.0 must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

Detections

Analytics

DISA Oracle MySQL 8.0 v2r1 OS Linux

Audit Details

File Details

Audit Changelog

No revisions found