MariaDB
TMA-MARIADB-2.1.4
The Backups Should be Properly Secured
MediumLevel 1Manual reviewmariadb
Description
The backup files will contain all data in the databases. Filesystem permissions and/or encryption should be used to prevent unauthorized users from gaining access to the backups.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Check who can access backup files: they must not be world-readable or in a world-readable directory, group access only for a backup-specific group, offsite copies restricted, and backups encrypted with a key stored separately (not a guessable password).
How it is fixed
Fix method: Guidance or infrastructure patch
Restrict backup files and directories (e.g. chmod 600/700, backup-specific owner/group), encrypt backups, and store the encryption key separately from the backups.
Properties
- Operating systems
- Any
- Tags
- mariadbdatabasebackupmanual
- Reference
- CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.4 The Backups Should be Properly Secured