TMAegis
Plus de règles pour mysql

TMA-MYSQL-1.1

Place Databases on Non-System Partitions

FaibleNiveau 1Revue manuellemysql

Description

It is generally accepted that host operating systems should include different filesystem partitions for different purposes. One set of filesystems is typically called system partitions, and these are generally reserved for host system/application operation.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Find the data and log locations: SELECT VARIABLE_NAME, VARIABLE_VALUE FROM performance_schema.global_variables WHERE (VARIABLE_NAME LIKE '%dir' OR VARIABLE_NAME LIKE '%file') AND VARIABLE_NAME NOT LIKE '%core%'; then run df -h <directory> for datadir and the others. They must not be on the root (/), /var or /usr partitions.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Create a dedicated partition/volume for the data, stop MySQL, move datadir there (copy preserving ownership mysql:mysql), update datadir in /etc/my.cnf (or /etc/mysql/mysql.conf.d/mysqld.cnf) and any SELinux/AppArmor policy, then start MySQL.

Propriétés

Systèmes d'exploitation
Tous
Étiquettes
mysqldatabasefilesystemmanual
Référence
CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 1.1 Place Databases on Non-System Partitions