TMA-MARIADB-7.6
Ensure No Anonymous Accounts Exist
TinggiLevel 1Otomatismariadb
Deskripsi
Anonymous accounts are users with empty usernames (''). Anonymous accounts have no passwords, so anyone can use them to connect to the MariaDB server. Runs mariadb -NBe with the client defaults: as root on the server the unix_socket plugin usually authenticates; otherwise put an administrative account in ~/.my.cnf (mode 0600), not MYSQL_PWD (see 1.4/1.6).
Cara pemeriksaan
Metode audit: Kueri SQL
sql_query
out=$(mariadb -NBe "SELECT COUNT(*) FROM mysql.user WHERE user = ''" 2>/dev/null) || exit 1; printf '%s\n' "$out"- Output yang diharapkan
0
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
DROP USER ''@'<host>'; for each anonymous account (or run mariadb-secure-installation).
Properti
- Sistem operasi
- Apa saja
- Tag
- mariadbdatabaseauthentication
- Referensi
- CIS MariaDB 10.11 Benchmark v1.0.0 - 7.6 Ensure No Anonymous Accounts Exist
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target mariadb