Home
Security Hardening
DISA STIG SQL Server 2012 Database OS V1R20

DISA STIG SQL Server 2012 Database OS V1R20

SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘110Shared’
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL2-00-009100 – A single SQL Server database connection configuration file (or a single set of credentials) must not be used to configure all database clients – or a single set of credentials must not be used to configure all clients.
Details Applications employ the concept of least privilege for specific duties and information systems (including specific functions, ports, protocols, and...
SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘binn’
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL2-00-009900 – OS and domain accounts utilized to run external procedures called by SQL Server must have limited privileges.
Details This requirement is intended to limit exposure due to operating from within a privileged account or role. The inclusion...
SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘Install’
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL2-00-010000 – DBA OS or domain accounts must be granted only those host system privileges necessary for the administration of SQL Server.
Details SQL Server DBAs, if assigned excessive OS privileges, could perform actions that could endanger the information system or hide...
SQL2-00-010100 – Use of the SQL Server software installation account must be restricted to SQL Server software installation.
Details This requirement is intended to limit exposure due to operating from within a privileged account. SQL Server does support...
SQL2-00-010600 – SQL Server must have allocated audit record storage capacity to meet the organization-defined requirements for saving audit record information.
Details SQL Server does not have the ability to be cognizant of potential audit log storage capacity issues. During the...
SQL2-00-016800 – SQL Server must have the SQL Server Analysis Service (SSAS) software component removed from SQL Server if SSAS is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL2-00-020100 – SQL Server must protect the integrity of publicly available information and applications.
Details The purpose of this control is to ensure organizations explicitly address the protection needs for public information and applications,...

Prev Next

DISA STIG SQL Server 2012 Database OS V1R20

SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘110Shared’

SQL2-00-009100 – A single SQL Server database connection configuration file (or a single set of credentials) must not be used to configure all database clients – or a single set of credentials must not be used to configure all clients.

SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘binn’

SQL2-00-009900 – OS and domain accounts utilized to run external procedures called by SQL Server must have limited privileges.

SQL2-00-015800 – The OS must limit privileges to change SQL Server software resident within software libraries (including privileged programs) – ‘Install’

SQL2-00-010000 – DBA OS or domain accounts must be granted only those host system privileges necessary for the administration of SQL Server.

SQL2-00-010100 – Use of the SQL Server software installation account must be restricted to SQL Server software installation.

SQL2-00-010600 – SQL Server must have allocated audit record storage capacity to meet the organization-defined requirements for saving audit record information.

SQL2-00-016800 – SQL Server must have the SQL Server Analysis Service (SSAS) software component removed from SQL Server if SSAS is unused.

SQL2-00-020100 – SQL Server must protect the integrity of publicly available information and applications.