Skip to content

Oracle MySQL 8.0 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The MySQL Database Server 8.0 must generate audit records when unsuccessful attempts to delete security objects occur.

    The removal of security objects from the database/Database Management System (DBMS) would seriously degrade a system's information assurance posture. If such an action is attempted, it must be logg...
    Rule Medium Severity
  • SRG-APP-000502-DB-000348

    Group
  • SRG-APP-000502-DB-000349

    Group
  • SRG-APP-000503-DB-000350

    Group
  • The MySQL Database Server 8.0 must generate audit records when successful logons or connections occur.

    For completeness of forensic analysis, it is necessary to track who/what (a user or other principal) logs on to the Database Management System (DBMS).
    Rule Medium Severity
  • SRG-APP-000503-DB-000351

    Group
  • The MySQL Database Server 8.0 must generate audit records when unsuccessful logons or connection attempts occur.

    For completeness of forensic analysis, it is necessary to track failed attempts to log on to the Database Management System (DBMS). While positive identification may not be possible in a case of fa...
    Rule Medium Severity
  • SRG-APP-000504-DB-000354

    Group
  • The MySQL Database Server 8.0 must generate audit records for all privileged activities or other system-level access.

    Without tracking privileged activity, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one. System documentation...
    Rule Medium Severity
  • SRG-APP-000504-DB-000355

    Group
  • SRG-APP-000505-DB-000352

    Group
  • The MySQL Database Server 8.0 must generate audit records showing starting and ending time for user access to the database(s).

    For completeness of forensic analysis, it is necessary to know how long a user's (or other principal's) connection to the Database Management System (DBMS) lasts. This can be achieved by recording ...
    Rule Medium Severity
  • SRG-APP-000506-DB-000353

    Group
  • The MySQL Database Server 8.0 must generate audit records when concurrent logons/connections by the same user from different workstations.

    For completeness of forensic analysis, it is necessary to track who logs on to the Database Management System (DBMS). Concurrent connections by the same user from multiple workstations may be vali...
    Rule Medium Severity
  • SRG-APP-000507-DB-000356

    Group
  • The MySQL Database Server 8.0 must be able to generate audit records when successful accesses to objects occur.

    Without tracking all or selected types of access to all or selected objects (tables, views, procedures, functions, etc.), it would be difficult to establish, correlate, and investigate the events r...
    Rule Medium Severity
  • SRG-APP-000507-DB-000357

    Group
  • The MySQL Database Server 8.0 must generate audit records when unsuccessful accesses to objects occur.

    Without tracking all or selected types of access to all or selected objects (tables, views, procedures, functions, etc.), it would be difficult to establish, correlate, and investigate the events r...
    Rule Medium Severity
  • SRG-APP-000508-DB-000358

    Group
  • SRG-APP-000175-DB-000067

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules