Point-in-Time Recovery

MediaNivel 2Automatizadamariadb

Descripción

With binlogs it is possible to implement point-in-time recovery. This makes it possible to restore the changes between the last full backup and the point-in-time. Enabling binlogs is not sufficient. The binlogs need to be backed up to separate media. The restore procedure should be created and tested. Passes when binary logging is enabled and binlog_expire_logs_seconds is not 0. Runs mariadb -NBe with the client defaults: as root on the server the unix_socket plugin usually authenticates; otherwise put an administrative account in ~/.my.cnf (mode 0600), not MYSQL_PWD (see 1.4/1.6).

Cómo se verifica

Método de auditoría: Consulta SQL

sql_query

out=$(mariadb -NBe "SELECT IF(@@global.log_bin = 1 AND @@global.binlog_expire_logs_seconds <> 0, 'compliant', 'noncompliant')" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Set log_bin=<path> and binlog_expire_logs_seconds=<retention seconds, not 0> under [mariadbd] in /etc/mysql/mariadb.conf.d/50-server.cnf (or /etc/my.cnf.d/server.cnf), then create and test a point-in-time restore procedure, then restart MariaDB.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: mariadbdatabasebackupbinlog
Referencia: CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.5 Point-in-Time Recovery

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target mariadb --level 2