SQL6-D0-012300 - SQL Server must maintain a separate execution domain for each executing process.

Information

Database management systems can maintain separate execution domains for each executing process by assigning each process a separate address space.

Each process has a distinct address space so that communication between processes is controlled through the security functions, and one process cannot modify the executing code of another process.

Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces.

Solution

Disable CLR support in SQL Server by executing the following query:

EXEC sp_configure 'clr enabled', 0
GO

RECONFIGURE
GO

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_SQL_Server_2016_Y24M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-39, CAT|II, CCI|CCI-002530, Rule-ID|SV-213991r961608_rule, STIG-ID|SQL6-D0-012300, STIG-Legacy|SV-93949, STIG-Legacy|V-79243, Vuln-ID|V-213991

Plugin: MS_SQLDB

Control ID: e4c45f1a89466e66d8fc18f8865e70c5336bd4d25e67d8b52c70be94be828e65