MySQL
TMA-MYSQL-5.10
Securely Define Stored Procedures and Functions DEFINER and INVOKER
SedangLevel 1Tinjauan manualmysql
Deskripsi
Stored procedure and stored function declarations include a definition of permissions which can be used to escalate permissions. It's important to inspect these settings to ensure they do not unnecessarily escalate privileges.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Run SHOW PROCEDURE STATUS; and SHOW FUNCTION STATUS; and inspect Definer and Security_type. For SQL SECURITY DEFINER routines owned by powerful users, review the code (SHOW CREATE PROCEDURE/FUNCTION <name>) and information_schema.routines/parameters.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Use SQL SECURITY INVOKER where possible, or set DEFINER to a least-privileged account (ALTER/CREATE ... DEFINER=...), and restrict EXECUTE on sensitive routines.
Properti
- Sistem operasi
- Apa saja
- Tag
- mysqldatabaseauthorizationmanual
- Referensi
- CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 5.10 Securely Define Stored Procedures and Functions DEFINER and INVOKER