github/sql-server-samples
1
0
Fork 0
mirror of https://github.com/Microsoft/sql-server-samples.git synced 2025-12-08 14:58:54 +00:00
Code Issues Releases Wiki Activity
Files
263e1ae7facad47a70f768ed53a245dd950194e4
sql-server-samples/samples/features/epm-framework/sample-policies/Symmetric Key for System Databases.xml
T

379 lines
22 KiB
XML
Raw Blame History

<?xml version="1.0" encoding="utf-8"?>
<!--Copyright (c) Microsoft Corporation.-->
<!--Licensed under the MIT License-->
<model xmlns="smlif.xsd">
<_locDefinition xmlns="urn:locstudio">
<_locDefault _loc="locNone" />
<_locTag _loc="locData">DMF:Name</_locTag>
<_locTag _loc="locData">DMF:Description</_locTag>
<_locTag _loc="locData">DMF:Condition</_locTag>
<_locTag _loc="locData">DMF:ObjectSet</_locTag>
<_locTag _loc="locData">DMF:RootCondition</_locTag>
<_locTag _loc="locData">DMF:PolicyCategory</_locTag>
<_locTag _loc="locData">DMF:HelpText</_locTag>
</_locDefinition>
<identity>
<name>urn:uuid:96fe1236-abf6-4a57-b54d-e9baab394fd1</name>
<baseURI>http://documentcollection/</baseURI>
</identity>
<xs:bufferSchema xmlns:xs="http://www.w3.org/2001/XMLSchema">
<definitions xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08">
<document>
<docinfo>
<aliases>
<alias>/system/schema/DMF</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<xs:schema targetNamespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified">
<xs:element name="Policy">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="ObjectSet">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="Condition">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="PolicyCategory">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="TargetSet">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="TargetSetLevel">
<xs:complexType>
<xs:sequence>
<xs:any namespace="http://schemas.microsoft.com/sqlserver/DMF/2007/08" processContents="skip" minOccurs="0" maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
</xs:element>
<DMF:bufferData xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08">
<instances xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08">
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Policy/Symmetric Key for System Databases</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Policy xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:PolicyCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/Fail For Any Symmetric Key</sml:Uri>
</sfc:Reference>
</DMF:PolicyCondition>
<DMF:PolicyObjectSet>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet</sml:Uri>
</sfc:Reference>
</DMF:PolicyObjectSet>
<DMF:PolicyRootCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/SQL Server 2005 or a Later Version</sml:Uri>
</sfc:Reference>
</DMF:PolicyRootCondition>
<DMF:PolicyPolicyCategory>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/PolicyCategory/Microsoft Best Practices_b Security</sml:Uri>
</sfc:Reference>
</DMF:PolicyPolicyCategory>
<DMF:Name type="string">Symmetric Key for System Databases</DMF:Name>
<DMF:Description type="string">Checks for user-created symmetric keys in the msdb, model, and tempdb databases. This is not recommended. This recommendation does not apply to the master database.</DMF:Description>
<DMF:Condition type="string">Fail For Any Symmetric Key</DMF:Condition>
<DMF:ObjectSet type="string">Symmetric Key for System Databases_ObjectSet</DMF:ObjectSet>
<DMF:RootCondition type="string">SQL Server 2005 or a Later Version</DMF:RootCondition>
<DMF:PolicyCategory type="string">Microsoft Best Practices: Security</DMF:PolicyCategory>
<DMF:Enabled type="boolean">false</DMF:Enabled>
<DMF:AutomatedPolicyEvaluationMode type="AutomatedPolicyEvaluationMode">None</DMF:AutomatedPolicyEvaluationMode>
<DMF:HelpText type="string" />
<DMF:HelpLink type="string">http://go.microsoft.com/fwlink/?LinkId=116329</DMF:HelpLink>
<DMF:ActiveEndDate type="dateTime">0001-01-01T00:00:00</DMF:ActiveEndDate>
<DMF:ActiveStartDate type="dateTime">0001-01-01T00:00:00</DMF:ActiveStartDate>
</DMF:Policy>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:ObjectSet xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:TargetSets>
<sfc:Collection>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey</sml:Uri>
</sfc:Reference>
</sfc:Collection>
</DMF:TargetSets>
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Name type="string">Symmetric Key for System Databases_ObjectSet</DMF:Name>
<DMF:Facet type="string">SymmetricKey</DMF:Facet>
</DMF:ObjectSet>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/Fail For Any Symmetric Key</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;EQ&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Function&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;FunctionType&gt;True&lt;/FunctionType&gt;&lt;?char 13?&gt;
&lt;ReturnType&gt;Bool&lt;/ReturnType&gt;&lt;?char 13?&gt;
&lt;Count&gt;0&lt;/Count&gt;&lt;?char 13?&gt;
&lt;/Function&gt;&lt;?char 13?&gt;
&lt;Function&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;FunctionType&gt;False&lt;/FunctionType&gt;&lt;?char 13?&gt;
&lt;ReturnType&gt;Bool&lt;/ReturnType&gt;&lt;?char 13?&gt;
&lt;Count&gt;0&lt;/Count&gt;&lt;?char 13?&gt;
&lt;/Function&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">Fail For Any Symmetric Key</DMF:Name>
<DMF:Description type="string">Confirms that symmetric keys in the database fail this condition.</DMF:Description>
<DMF:Facet type="string">SymmetricKey</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/SQL Server 2005 or a Later Version</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;GE&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;VersionMajor&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Constant&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Numeric&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;ObjType&gt;System.Int32&lt;/ObjType&gt;&lt;?char 13?&gt;
&lt;Value&gt;9&lt;/Value&gt;&lt;?char 13?&gt;
&lt;/Constant&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">SQL Server 2005 or a Later Version</DMF:Name>
<DMF:Description type="string">Confirms that the version of SQL Server is 2005 or a later version.</DMF:Description>
<DMF:Facet type="string">Server</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/PolicyCategory/Microsoft Best Practices_b Security</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:PolicyCategory xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Name type="string">Microsoft Best Practices: Security</DMF:Name>
</DMF:PolicyCategory>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:TargetSet xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Levels>
<sfc:Collection>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey/TargetSetLevel/Server_/Database_/SymmetricKey</sml:Uri>
</sfc:Reference>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey/TargetSetLevel/Server_/Database</sml:Uri>
</sfc:Reference>
</sfc:Collection>
</DMF:Levels>
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:TargetTypeSkeleton type="string">Server/Database/SymmetricKey</DMF:TargetTypeSkeleton>
<DMF:Enabled type="boolean">true</DMF:Enabled>
</DMF:TargetSet>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey/TargetSetLevel/Server_/Database_/SymmetricKey</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:TargetSetLevel xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:TargetTypeSkeleton type="string">Server/Database/SymmetricKey</DMF:TargetTypeSkeleton>
<DMF:LevelName type="string">SymmetricKey</DMF:LevelName>
<DMF:Condition type="string" />
</DMF:TargetSetLevel>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/Condition/System Databases Not Including Master</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:Condition xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:Expression type="string">
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;AND&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;NE&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;String&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;Name&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Constant&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;String&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;ObjType&gt;System.String&lt;/ObjType&gt;&lt;?char 13?&gt;
&lt;Value&gt;master&lt;/Value&gt;&lt;?char 13?&gt;
&lt;/Constant&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;&lt;?char 13?&gt;
&lt;Operator&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;OpType&gt;EQ&lt;/OpType&gt;&lt;?char 13?&gt;
&lt;Count&gt;2&lt;/Count&gt;&lt;?char 13?&gt;
&lt;Attribute&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;Name&gt;IsSystemObject&lt;/Name&gt;&lt;?char 13?&gt;
&lt;/Attribute&gt;&lt;?char 13?&gt;
&lt;Function&gt;&lt;?char 13?&gt;
&lt;TypeClass&gt;Bool&lt;/TypeClass&gt;&lt;?char 13?&gt;
&lt;FunctionType&gt;True&lt;/FunctionType&gt;&lt;?char 13?&gt;
&lt;ReturnType&gt;Bool&lt;/ReturnType&gt;&lt;?char 13?&gt;
&lt;Count&gt;0&lt;/Count&gt;&lt;?char 13?&gt;
&lt;/Function&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;&lt;?char 13?&gt;
&lt;/Operator&gt;
</DMF:Expression>
<DMF:Name type="string">System Databases Not Including Master</DMF:Name>
<DMF:Description type="string">Confirms that the database is a system database and its name is not master.</DMF:Description>
<DMF:Facet type="string">Database</DMF:Facet>
</DMF:Condition>
</data>
</document>
<document>
<docinfo>
<aliases>
<alias>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey/TargetSetLevel/Server_/Database</alias>
</aliases>
<sfc:version DomainVersion="3" />
</docinfo>
<data>
<DMF:TargetSetLevel xmlns:DMF="http://schemas.microsoft.com/sqlserver/DMF/2007/08" xmlns:sfc="http://schemas.microsoft.com/sqlserver/sfc/serialization/2007/08" xmlns:sml="sml.xsd" xmlns:xs="http://www.w3.org/2001/XMLSchema">
<DMF:Parent>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/ObjectSet/Symmetric Key for System Databases__ObjectSet/TargetSet/Server_/Database_/SymmetricKey</sml:Uri>
</sfc:Reference>
</DMF:Parent>
<DMF:TargetSetLevelCondition>
<sfc:Reference sml:ref="true">
<sml:Uri>/PolicyStore/Condition/System Databases Not Including Master</sml:Uri>
</sfc:Reference>
</DMF:TargetSetLevelCondition>
<DMF:TargetTypeSkeleton type="string">Server/Database</DMF:TargetTypeSkeleton>
<DMF:LevelName type="string">Database</DMF:LevelName>
<DMF:Condition type="string">System Databases Not Including Master</DMF:Condition>
</DMF:TargetSetLevel>
</data>
</document>
</instances>
</DMF:bufferData>
</xs:schema>
</data>
</document>
</definitions>
</xs:bufferSchema>
</model>
Reference in New Issue View Git Blame Copy Permalink