STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

DISA Rule

SV-253730r961443_rule

Vulnerability Number

V-253730

Group Title

SRG-APP-000374-DB-000322

Rule Version

MADB-10-007600

Severity

CAT II

CCI(s)

CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.

Weight

Fix Recommendation

On the OS command line run the following command to get the time zone the system is in:

date | awk '{print $5;}'

If the system is in UTC, to set the time zone for timestamps to UTC, modify the MariaDB configuration file located within /etc/my.cnf.d/ and set the variable time_zone to SYSTEM under the server section. Restart MariaDB Enterprise Server.

Example:

[server]
Timezone = SYSTEM

If the OS system timezone is not set to UTC, to set the time zone for timestamps to UTC, modify the MariaDB configuration file located within /etc/my.cnf.d/ and set the variable time_zone to UTC under the server section. Restart MariaDB Enterprise Server.

Example:

[server]
Timezone = UTC

Check Contents

Check the current timezone value by running the following command as an administrative user:

MariaDB> SHOW GLOBAL VARIABLES LIKE '%zone%';

If time_zone = SYSTEM, and system_time_zone is not equal to UTC, this is a finding.

If time_zone is not SYSTEM and is not UTC, this is a finding.

Vulnerability Number

V-253730

Documentable

False

Rule Version

MADB-10-007600

Severity Override Guidance

Check Content Reference

Target Key

5475