Ensure Symbolic Links are Disabled

MediaNivel 1Automatizadamysql

Descripción

The symbolic-links and skip-symbolic-links options for MySQL determine whether symbolic link support is available. When use of symbolic links is enabled, they have different effects depending on the host platform. When symbolic links are disabled, then symbolic links stored in files or entries in tables are not used by the database. Runs mysql -NBe with the client defaults: put an administrative account in ~/.my.cnf (mode 0600) or a mysql_config_editor login path, not MYSQL_PWD (see 1.4/1.6).

Cómo se verifica

Método de auditoría: Consulta SQL

sql_query

out=$(mysql -NBe "SELECT IF(@@global.have_symlink = 'DISABLED', 'compliant', 'noncompliant')" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Set skip-symbolic-links=YES under [mysqld] in /etc/my.cnf (or /etc/mysql/mysql.conf.d/mysqld.cnf), then restart MySQL.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: mysqldatabaseconfiguration
Referencia: CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 4.6 Ensure Symbolic Links are Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target mysql