暂无图片
暂无图片
暂无图片
暂无图片
暂无图片
CIS_Oracle_MySQL_Community_Server_5.7_Benchmark_v2.0.0_FINAL_UPDATE.pdf
52
181页
1次
2024-09-03
免费下载
CIS Oracle MySQL
Community Server 5.7
Benchmark
v2.0.0 - 04-20-2022
Page 1
Terms of Use
Please see the below link for our current terms of use:
https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/
Page 2
Table of Contents
Terms of Use ..................................................................................................................... 1
Table of Contents ............................................................................................................. 2
Overview ............................................................................................................................ 5
Intended Audience ..................................................................................................................... 5
Consensus Guidance ................................................................................................................. 6
Typographical Conventions ...................................................................................................... 7
Recommendation Definitions ......................................................................................... 8
Title ............................................................................................................................................... 8
Assessment Status .................................................................................................................... 8
Automated ............................................................................................................................................... 8
Manual...................................................................................................................................................... 8
Profile ........................................................................................................................................... 8
Description .................................................................................................................................. 8
Rationale Statement ................................................................................................................... 8
Impact Statement........................................................................................................................ 9
Audit Procedure .......................................................................................................................... 9
Remediation Procedure ............................................................................................................. 9
Default Value ............................................................................................................................... 9
References .................................................................................................................................. 9
CIS Critical Security Controls
®
(CIS Controls
®
) ...................................................................... 9
Additional Information ............................................................................................................... 9
Profile Definitions ..................................................................................................................... 10
Acknowledgements .................................................................................................................. 12
Recommendations ......................................................................................................... 13
1 Operating System Level Configuration .............................................................................. 13
1.1 Place Databases on Non-System Partitions (Manual) .......................................................................... 14
1.2 Use Dedicated Least Privileged Account for MySQL Daemon/Service (Automated) ............................ 17
1.3 Disable MySQL Command History (Automated) ................................................................................... 19
1.4 Verify That the MYSQL_PWD Environment Variable Is Not In Use (Automated) ................................. 21
1.5 Ensure Interactive Login is Disabled (Automated) ................................................................................ 23
1.6 Verify That 'MYSQL_PWD' is Not Set in Users' Profiles (Automated) .................................................. 25
2 Installation and Planning ...................................................................................................... 26
2.1 Backup and Disaster Recovery ..................................................................................................... 27
2.1.1 Backup Policy in Place (Manual) ........................................................................................................ 28
2.1.2 Verify Backups are Good (Manual) .................................................................................................... 29
2.1.3 Secure Backup Credentials (Manual) ................................................................................................. 30
of 181
免费下载
【版权声明】本文为墨天轮用户原创内容,转载时必须标注文档的来源(墨天轮),文档链接,文档作者等基本信息,否则作者和墨天轮有权追究责任。如果您发现墨天轮中有涉嫌抄袭或者侵权的内容,欢迎发送邮件至:contact@modb.pro进行举报,并提供相关证据,一经查实,墨天轮将立刻删除相关内容。