Ensure Password Reuse Restrictions Are Configured

SedangLevel 2Otomatistdsql

Deskripsi

Password reuse restrictions prevent users from reusing recently used passwords when changing their password. Runs the mysql client against the TDSQL data node selected by TDSQL_MYSQL_OPTS (e.g. "-h10.0.0.5 -P4001 -utdsql_audit"); keep the password in ~/.my.cnf or a login path rather than MYSQL_PWD or the command line (see 1.4 and 1.5). Passes when password_history >= 5 and password_reuse_interval >= 365.

Cara pemeriksaan

Metode audit: Kueri SQL

sql_query

out=$(mysql ${TDSQL_MYSQL_OPTS:-} -NBe "SELECT CASE WHEN @@global.password_history >= 5 AND @@global.password_reuse_interval >= 365 THEN 'compliant' ELSE 'noncompliant' END" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

SET GLOBAL password_history = 5; SET GLOBAL password_reuse_interval = 365;

Properti

Sistem operasi: Apa saja
Tag: tdsqlauthentication
Referensi: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 7.6 Ensure Password Reuse Restrictions Are Configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target tdsql --level 2