STIGQter: STIG Summary: MariaDB Enterprise 10.x Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

MariaDB must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.

DISA Rule

SV-253767r961827_rule

Vulnerability Number

V-253767

Group Title

SRG-APP-000504-DB-000355

Rule Version

MADB-10-011500

Severity

CAT II

CCI(s)

• CCI-000172 - Generate audit records for the event types defined in AU-2 c that include the audit record content defined in AU-3.

Weight

10

Fix Recommendation

Edit the necessary filters to include the desired logging actions. Exact steps vary depending on desired logging.

Example named audit filter assigned to specific user:

MariaDB> INSERT INTO mysql.server_audit_users (host, user, filtername)
VALUES ("%", "user1", "filter_example");

MariaDB> SET GLOBAL server_audit_reload_filters=ON;

Check Contents

Check what filters are in place by running the following as an administrative user:

MariaDB> SELECT * FROM mysql.server_audit_filters;

Verify audit filters are correctly configured to log desired actions per user. If not, this is a finding.

Vulnerability Number

V-253767

Documentable

False

Rule Version

MADB-10-011500

Severity Override Guidance

Check what filters are in place by running the following as an administrative user:

MariaDB> SELECT * FROM mysql.server_audit_filters;

Verify audit filters are correctly configured to log desired actions per user. If not, this is a finding.

Check Content Reference

M

Target Key

5475