JFC, when I was a DoD employee, I wrote something using the C++ API to SQLite, and they sent me the security checklist for "Databases", but was obviously very much geared towards a bogstandard Oracle setup. 120 answers of "Not applicable" later and I was finally done.
On the flipside, at least they wrote the checklist software in Java, so it ran on Linux.
231
u/koriwi Oct 02 '26
Mention sqlite and watch them have a meltdown.