UCF STIG Viewer Logo

Application software should be owned by a Software Application account.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3805 DG0019-SQLServer9 SV-24135r1_rule DCSL-1 ECSD-1 ECSD-2 Low
Description
File and directory ownership imparts full privileges to the owner. These privileges should be restricted to a single, dedicated account to preserve proper chains of ownership and privilege assignment management.
STIG Date
Microsoft SQL Server 2005 Instance Security Technical Implementation Guide 2015-06-16

Details

Check Text ( C-13742r1_chk )
Review the ownership of all DBMS and dependent application software and configuration files. If the owner is other than the software installation account or the designated owner account for the file, this is a Finding.

Some configuration and log files may be owned by a service or process account. Ownership of these files should be recorded and verified accordingly.
Fix Text (F-14810r1_fix)
Assign DBMS file and directory ownership to the software installation and maintenance account.

Use the software owner account to install and maintain the DBMS software libraries and configuration files.