search

ClarityBusinessSolutions / mdb-ent-docker

Docker for MongoDB Enterprise 7.0
0 stars 0 forks source link

MongoDB must provide audit record generation for DoD-defined auditable events within all DBMS/database components. #2

Open nwwatson opened 2 months ago

nwwatson commented 2 months ago

Edit the MongoDB configuration file (default location: /etc/mongod.conf) and add a configured "auditLog" setting:

auditLog:
  destination: file
  format: BSON
  path: /var/log/mongodb/audit/auditLog.bson

Note: The "/var/log/mongodb/audit" directory will need to be created/present or the database will not start.

Alternately, the audit logs can be written to syslog with the following setting:

auditLog:
  destination: syslog

This setting will record the following operations: schema (DDL), replica set and sharded cluster and authentication and authorization.

To capture all operations in the audit, enable the audit system to log authorization successes by adding the following line to the /etc/mongod.conf file:

setParameter:
  auditAuthorizationSuccess: true

Setting of auditAuthorizationSuccess enables auditing of authorization success for the authCheck action. The parameter value must be true to audit read and write operations. However, when auditAuthorizationSuccess is false auditing has less performance impact because the audit system only logs authorization failures.

If the "auditLog" setting was present and contained a filter parameter, ensure the "filter:" expression does not prevent the auditing of events that should be audited or remove the "filter:" parameter to enable auditing all events.

Documentation on configuring filters can be found here: https://docs.mongodb.com/v7.0/tutorial/configure-audit-filters/

nwwatson commented 2 months ago

addresses MD7X-00-007000

nwwatson commented 2 months ago

addresses MD7X-00-007100

nwwatson commented 2 months ago

addresses MD7X-00-007200

nwwatson commented 2 months ago

addresses MD7X-00-007900

nwwatson commented 2 months ago

adressess MD7X-00-009400

nwwatson commented 2 months ago

addresses MD7X-00-009500

nwwatson commented 2 months ago

addresses MD7X-00-009600

nwwatson commented 2 months ago

addresses MD7X-00-009700

nwwatson commented 2 months ago

addresses MD7X-00-009800

nwwatson commented 2 months ago

addresses MD7X-00-009900

nwwatson commented 2 months ago

addresses MD7X-00-010000

nwwatson commented 2 months ago

addresses MD7X-00-010100

nwwatson commented 2 months ago

addresses MD7X-00-010200

nwwatson commented 2 months ago

addresses MD7X-00-010300

nwwatson commented 2 months ago

addresses MD7X-00-010400

nwwatson commented 2 months ago

addresses MD7X-00-010500

nwwatson commented 2 months ago

addresses MD7X-00-010600

nwwatson commented 2 months ago

addresses MD7X-00-010700

nwwatson commented 2 months ago

addresses MD7X-00-010800

nwwatson commented 2 months ago

addresses MD7X-00-010900

nwwatson commented 2 months ago

addresses MD7X-00-011000

nwwatson commented 2 months ago

addresses MD7X-00-011100

nwwatson commented 2 months ago

addresses MD7X-00-011200

nwwatson commented 2 months ago

addresses MD7X-00-011300

nwwatson commented 2 months ago

addresses MD7X-00-011400

nwwatson commented 2 months ago

addresses MD7X-00-011500

nwwatson commented 2 months ago

addresses MD7X-00-011600

nwwatson commented 2 months ago

addresses MD7X-00-011700

nwwatson commented 2 months ago

addresses MD7X-00-011800

nwwatson commented 2 months ago

addresses MD7X-00-011900

nwwatson commented 2 months ago

addresses MD7X-00-012000