DISA_STIG_Oracle_MySQL_8.0_v2r1_OS_Linux.audit from DISA Oracle MySQL 8.0 v2r1 STIG

MYS8-00-000300 - MySQL Database Server 8.0  must produce audit records containing sufficient information to establish what type of events occurred.

CAT|II

CCI|CCI-000130

Rule-ID|SV-235097r960891_rule

STIG-ID|MYS8-00-000300

Vuln-ID|V-235097

MYS8-00-001200 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized read access.

CCI|CCI-000162

Rule-ID|SV-235099r960930_rule

STIG-ID|MYS8-00-001200

Vuln-ID|V-235099

MYS8-00-001300 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-235100r960933_rule

STIG-ID|MYS8-00-001300

Vuln-ID|V-235100

MYS8-00-001400 - The audit information produced by the MySQL Database Server 8.0 must be protected from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-235101r960936_rule

STIG-ID|MYS8-00-001400

Vuln-ID|V-235101

MYS8-00-001800 - The MySQL Database Server 8.0 must be able to generate audit records when privileges/permissions are retrieved.

CCI|CCI-000172

Rule-ID|SV-235105r960885_rule

STIG-ID|MYS8-00-001800

Vuln-ID|V-235105

MYS8-00-001900 - The MySQL Database Server 8.0 must be able to generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.

Rule-ID|SV-235106r960885_rule

STIG-ID|MYS8-00-001900

Vuln-ID|V-235106

MYS8-00-002000 - The MySQL Database Server 8.0 must be able to generate audit records when security objects are accessed.

Rule-ID|SV-235107r961791_rule

STIG-ID|MYS8-00-002000

Vuln-ID|V-235107

MYS8-00-002100 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access security objects occur.

Rule-ID|SV-235108r961791_rule

STIG-ID|MYS8-00-002100

Vuln-ID|V-235108

MYS8-00-002200 - The MySQL Database Server 8.0 must generate audit records when categories of information (e.g., classification levels/security levels) are accessed.

Rule-ID|SV-235109r961797_rule

STIG-ID|MYS8-00-002200

Vuln-ID|V-235109

MYS8-00-002300 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to access categories of information (e.g., classification levels/security levels) occur.

Rule-ID|SV-235110r961797_rule

STIG-ID|MYS8-00-002300

Vuln-ID|V-235110

MYS8-00-002800 - The MySQL Database Server 8.0 must generate audit records when security objects are modified.

Rule-ID|SV-235115r961803_rule

STIG-ID|MYS8-00-002800

Vuln-ID|V-235115

MYS8-00-002900 - The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to modify security objects occur.

Rule-ID|SV-235116r961803_rule

STIG-ID|MYS8-00-002900

Vuln-ID|V-235116

MYS8-00-004800 - The MySQL Database Server 8.0 must enforce authorized access to all PKI private keys stored/utilized by the MySQL Database Server 8.0.

CAT|I

CCI|CCI-000186

Rule-ID|SV-235135r961041_rule

STIG-ID|MYS8-00-004800

Vuln-ID|V-235135

MYS8-00-007800 - The MySQL Database Server 8.0 must initiate session auditing upon startup.

CCI|CCI-001464

Rule-ID|SV-235159r960888_rule

STIG-ID|MYS8-00-007800

Vuln-ID|V-235159

MYS8-00-009200 - The MySQL Database Server 8.0 must enforce access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s).

CCI|CCI-001813

Rule-ID|SV-235169r961461_rule

STIG-ID|MYS8-00-009200

Vuln-ID|V-235169

MYS8-00-011500 - The MySQL Database Server 8.0 must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements.

CCI|CCI-002450

Rule-ID|SV-235187r962034_rule

STIG-ID|MYS8-00-011500

Vuln-ID|V-235187

MYS8-00-011900 - The MySQL Database Server 8.0 must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions.

Detections

Analytics

DISA Oracle MySQL 8.0 v2r1 OS Linux

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous