TMAegis
More rules for tdsql

TMA-TDSQL-2.2

Ensure TDSQL Is Installed from a Trusted Source

HighLevel 1Manual reviewtdsql

Description

TDSQL binaries should be obtained only from trusted, verified sources. Package integrity should be verified via checksums or digital signatures before deployment.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

# Verify binary integrity sha256sum /path/to/tdsql/bin/oss_server sha256sum /path/to/tdsql/bin/scheduler # Compare against the published checksums

How it is fixed

Fix method: Guidance or infrastructure patch

Download TDSQL only from official repositories. When building from source: cd /path/to/TDSQL_OSS/build ./build.sh -j Maintain a checksum record of deployed binaries.

Properties

Operating systems
Any
Tags
tdsqlsupply-chain
Reference
CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 2.2 Ensure TDSQL Is Installed from a Trusted Source