Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000381-DB-000361

    <GroupDescription></GroupDescription>
    Group
  • The MySQL Database Server 8.0 must produce audit records of its enforcement of access restrictions associated with changes to the configuration of the MySQL Database Server 8.0 or database(s).

    &lt;VulnDiscussion&gt;Without auditing the enforcement of access restrictions against changes to configuration, it would be difficult to identify a...
    Rule Medium Severity
  • SRG-APP-000356-DB-000314

    <GroupDescription></GroupDescription>
    Group
  • The MySQL Database Server 8.0 must utilize centralized management of the content captured in audit records generated by all components of the MySQL Database Server 8.0.

    &lt;VulnDiscussion&gt;The content captured in audit records must be managed from a central location (necessitating automation). Centralized managem...
    Rule Medium Severity
  • SRG-APP-000356-DB-000315

    <GroupDescription></GroupDescription>
    Group
  • The MySQL Database Server 8.0 must provide centralized configuration of the content to be captured in audit records generated by all components of the MySQL Database Server 8.0.

    &lt;VulnDiscussion&gt;If the configuration of the Database Management System's (DBMS's) auditing is spread across multiple locations in the databas...
    Rule Medium Severity
  • SRG-APP-000357-DB-000316

    <GroupDescription></GroupDescription>
    Group
  • The MySQL Database Server 8.0 must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

    &lt;VulnDiscussion&gt;To ensure sufficient storage capacity for the audit logs, the Database Management System (DBMS) must be able to allocate audi...
    Rule Medium Severity
  • SRG-APP-000515-DB-000318

    <GroupDescription></GroupDescription>
    Group
  • The MySQL Database Server 8.0 must off-load audit data to a separate log management facility; this must be continuous and in near real time for systems with a network connection to the storage facility and weekly or more often for stand-alone systems.

    &lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules