Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000311-DB-000308

    Group
  • MongoDB must associate organization-defined types of security labels having organization-defined security label values with information in storage and transmission.

    Without the association of security labels to information, there is no basis for MongoDB to make security-related access-control decisions. Security labels are abstractions representing the basic ...
    Rule Medium Severity
  • SRG-APP-000328-DB-000301

    Group
  • MongoDB must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.

    Discretionary Access Control (DAC) is based on the notion that individual users are "owners" of objects and therefore have discretion over who should be authorized to access the object and in which...
    Rule Medium Severity
  • SRG-APP-000179-DB-000114

    Group
  • MongoDB must use NIST FIPS 140-2 or 140-3 validated cryptographic modules for cryptographic operations.

    The use of weak or not validated cryptographic algorithms undermines the purposes of utilizing encryption and digital signatures to protect data. Weak algorithms can be easily broken and not valid...
    Rule High Severity
  • SRG-APP-000428-DB-000386

    Group
  • MongoDB must implement cryptographic mechanisms to prevent unauthorized modification of organization-defined information at rest (to include, at a minimum, PII and classified information) on organization-defined information system components.

    DBMSs handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest. These cryptographic mec...
    Rule Medium Severity
  • SRG-APP-000001-DB-000031

    Group
  • MongoDB must limit the total number of concurrent connections to the database.

    MongoDB must limit the total number of concurrent connections to the database.
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules