Ensure Sensitive Configuration Data Is Encrypted

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

# Check for cleartext passwords in the configuration grep -rn 'password' /path/to/tdsql/conf/ | grep -v '#' | head -20 # Encrypted passwords appear as long base64-encoded strings. # Short, simple cleartext strings indicate unencrypted passwords.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Encrypt all passwords using TDSQL's encryption tools. Ensure the master key used for encryption is stored separately from the encrypted data and managed by an independent key management process. Integrating with a KMS is strongly recommended. Encryption process overview: 1.