TMA-MSSQL2022-2.9

Ensure 'Trustworthy' Database Property is set to 'Off'

VisokaNivo 1Automatskamssql

Opis

The TRUSTWORTHY database option allows database objects to access objects in other databases under certain circumstances. Provides protection from malicious CLR assemblies or extended procedures.

Kako se proverava

Metod provere: SQL upit

sql_query

sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT COUNT(*) FROM sys.databases WHERE is_trustworthy_on = 1 AND name <> 'msdb';"

Očekivani izlaz: 0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Execute the following T-SQL statement against the databases (replace <database_name> below) returned by the Audit Procedure: ALTER DATABASE [<database_name>] SET TRUSTWORTHY OFF;

Svojstva

Operativni sistemi: Bilo koji
Oznake: mssqlsqlserver-2022
Referenca: CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 2.9 Ensure 'Trustworthy' Database Property is set to 'Off'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target mssql