SQL Server must protect against a user falsely repudiating by ensuring databases are not in a trust relationship.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-213904 | SQL6-D0-000600 | SV-213904r960864_rule | CCI-000166 | medium |
| Description | ||||
| Non-repudiation of actions taken is required in order to maintain data integrity. Examples of particular actions taken by individuals include creating information, sending a message, approving information (e.g., indicating concurrence or signing a contract), and receiving a message. Non-repudiation protects against later claims by a user of not having created, modified, or deleted a particular data item or collection of data in the database. SQL Server provides the ability for high privileged accounts to impersonate users in a database using the TRUSTWORTHY feature. This will allow members of the fixed database role to impersonate any user within the database. | ||||
| STIG | Date | |||
| MS SQL Server 2016 Database Security Technical Implementation Guide | 2025-06-11 | |||
Details
Check Text (C-213904r960864_chk)
If the database being reviewed is MSDB, trustworthy is required to be enabled, and therefore this is not a finding.
Execute the following query:
SELECT SUSER_SNAME(d.owner_sid) AS DatabaseOwner,
CASE
WHEN d.is_trustworthy_on = 0 THEN 'No'
WHEN d.is_trustworthy_on = 1 THEN 'Yes'
END AS IsTrustworthy,
CASE
WHEN role.name IN ('sysadmin','securityadmin')
OR permission.permission_name = 'CONTROL SERVER'
THEN 'YES'
ELSE 'No'
END AS 'IsOwnerPrivileged'
FROM sys.databases d
LEFT JOIN sys.server_principals login ON d.owner_sid = login.sid
LEFT JOIN sys.server_role_members rm ON login.principal_id = rm.member_principal_id
LEFT JOIN sys.server_principals role ON rm.role_principal_id = role.principal_id
LEFT JOIN sys.server_permissions permission ON login.principal_id = permission.grantee_principal_id
WHERE d.name = DB_NAME()
If trustworthy is not enabled, this is not a finding.
If trustworthy is enabled and the database owner is not a privileged account, this is not a finding.
If trustworthy is enabled and the database owner is a privileged account, review the system documentation to determine if the trustworthy property is required and authorized. If this is not documented, this is a finding.
Fix Text (F-15120r313145_fix)
Disable trustworthy on the database.
ALTER DATABASE [<database name>] SET TRUSTWORTHY OFF