Applications must, for organization defined information system components, load and execute the operating environment from hardware-enforced, read-only media.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32545	SRG-APP-000241-DB-NA	SV-42882r1_rule		Medium

Description
Organizations may require the information system to load the operating environment from hardware enforced read-only media. The term operating environment is defined as the code upon which applications are hosted, for example, a monitor, executive, operating system, or application running directly on the hardware platform. Hardware-enforced, read-only media include CD-R/DVD-R disk drives. Use of non-modifiable storage ensures the integrity of the software program from the point of creation of the read-only image. This requirement is specific to applications running directly on the hardware platform. This requirement is NA for databases.

Description

Organizations may require the information system to load the operating environment from hardware enforced read-only media. The term operating environment is defined as the code upon which applications are hosted, for example, a monitor, executive, operating system, or application running directly on the hardware platform. Hardware-enforced, read-only media include CD-R/DVD-R disk drives. Use of non-modifiable storage ensures the integrity of the software program from the point of creation of the read-only image. This requirement is specific to applications running directly on the hardware platform. This requirement is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-40984r1_chk )
This check is NA for databases.

Fix Text (F-36460r1_fix)
This fix is NA for databases.