Rule ID
SV-286217r1292207_rule
Version
V1R1
CCIs
If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by MariaDB must include date and time. Time is commonly expressed in UTC, a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC. Some DBMS products offer a data type called TIMESTAMP that is not a representation of date and time. Rather, it is a database state counter and does not correspond to calendar and clock time. This requirement does not refer to that meaning of TIMESTAMP.
Check the current time zone value by running the following command as the administrator user (shown here as root): SHOW GLOBAL VARIABLES LIKE '%zone%'; +-------------------------------+---------------+ | Variable_name | Value | +-------------------------------+---------------+ | system_time_zone | UTC | | time_zone | SYSTEM | +--I----------------------------+---------------+ If "time_zone = SYSTEM", and "system_time_zone" is not equal to UTC, this is a finding. If "time_zone" is not "SYSTEM" and is not UTC, this is a finding.
On the OS command line run the following command to get the time zone the system is in:
$ date | awk {print $5; }
If the system is in UTC, to set the time zone for timestamps to UTC, modify the MariaDB configuration file located within "/etc/my.cnf.d/" and set the variable "time_zone" to "SYSTEM" under the server section. Then, restart MariaDB Enterprise Server.
Example:
[server]
Timezone = SYSTEM
Set the time zone for timestamps to UTC:
[server]
Timezone = UTC