CCI|CCI-003980

Title

Allow user installation of software only with explicit privileged status.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
AIX7-00-003102 - AIX must turn on enhanced Role-Based Access Control (RBAC) to isolate security functions from nonsecurity functions, to grant system privileges to other operating system admins, and prohibit user installation of system software without explicit privileged status.	Unix	DISA STIG AIX 7.x v3r1
APPL-14-005080 - The macOS system must prohibit user installation of software into /users/.	Unix	DISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-15-005080 - The macOS system must prohibit user installation of software into /users/.	Unix	DISA Apple macOS 15 (Sequoia) STIG v1r1
CD12-00-008400 - PostgreSQL must prohibit user installation of logic modules (functions, trigger procedures, views, etc.) without explicit privileged status.	Unix	DISA STIG Crunchy Data PostgreSQL OS v3r1
EDGE-00-000039 - URLs must be allowlisted for plugin use if used.	Windows	DISA STIG Edge v2r2
EPAS-00-008400 - The EDB Postgres Advanced Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.	PostgreSQLDB	EnterpriseDB PostgreSQL Advanced Server DB v2r1
MADB-10-007800 - MariaDB must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.	MySQLDB	DISA MariaDB Enterprise 10.x v2r2 DB
SQL6-D0-003000 - SQL Server must prohibit user installation of logic modules (stored procedures, functions, triggers, views, etc.) without explicit privileged status.	MS_SQLDB	DISA STIG SQL Server 2016 Database Audit v3r2
WN10-CC-000310 - Users must be prevented from changing installation options.	Windows	DISA Windows 10 STIG v3r2
WN10-CC-000315 - The Windows Installer Always install with elevated privileges must be disabled.	Windows	DISA Windows 10 STIG v3r2
WN11-CC-000310 - Users must be prevented from changing installation options.	Windows	DISA Windows 11 STIG v2r2
WN11-CC-000315 - The Windows Installer feature 'Always install with elevated privileges' must be disabled.	Windows	DISA Windows 11 STIG v2r2
WN19-CC-000420 - Windows Server 2019 must prevent users from changing installation options.	Windows	DISA Windows Server 2019 STIG v3r2
WN19-CC-000430 - Windows Server 2019 must disable the Windows Installer Always install with elevated privileges option.	Windows	DISA Windows Server 2019 STIG v3r2
WN22-CC-000420 - Windows Server 2022 must prevent users from changing installation options.	Windows	DISA Windows Server 2022 STIG v2r2
WN22-CC-000430 - Windows Server 2022 must disable the Windows Installer Always install with elevated privileges option.	Windows	DISA Windows Server 2022 STIG v2r2