STIGQter: STIG Summary: Database Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 22 Jan 2021:

The DBMS must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

DISA Rule

SV-206536r617447_rule

Vulnerability Number

V-206536

Group Title

SRG-APP-000109

Rule Version

SRG-APP-000109-DB-000321

Severity

CAT II

CCI(s)

CCI-000140 - The information system takes organization-defined actions upon audit failure (e.g., shut down information system, overwrite oldest audit records, stop generating audit records).

Weight

Fix Recommendation

Deploy a DBMS capable of continuing to generate audit records upon audit failure.

Configure the system to continue to generate audit records, overwriting the oldest existing records, in the case of an auditing failure.

Check Contents

If the application owner has determined that the need for system availability does not outweigh the need for a complete audit trail, this is not applicable (NA).

Review DBMS, OS, or third-party logging application settings and/or documentation to determine whether the system is capable of continuing to generate audit records, overwriting the oldest existing records, in the case of an auditing failure. If it is not, this is a finding.

If the system is capable of continuing to generate audit records upon audit failure but is not configured to do so, this is a finding.

The DBMS must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments