MariaDB
TMA-MARIADB-2.1.3
Secure Backup Credentials
MediumLevel 1Manual reviewmariadb
Description
A database user with the least amount of privileges required to perform backup is needed. The credentials for this user should be protected. The password, certificate, and any other credentials should be protected.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Check permissions of files containing backup passwords and/or SSL keys (ls -l on option files and key files used by backup jobs); they must be readable only by the backup account.
How it is fixed
Fix method: Guidance or infrastructure patch
chmod 600 the files holding backup credentials/keys and chown them to the backup user; prefer an option file over passwords on the command line.
Properties
- Operating systems
- Any
- Tags
- mariadbdatabasebackupcredentialsmanual
- Reference
- CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.3 Secure Backup Credentials