Ensure 'debug_print_parse' is disabled

RendahLevel 1Otomatisyugabytedb

Deskripsi

The debug_print_parse setting enables printing the resulting parse tree for each executed query. These messages are emitted at the LOG message level. Unless directed otherwise by your organization's logging policy, it is recommended this setting be disabled by setting it to off. Runs ysqlsh (add the YugabyteDB bin directory to PATH) against PGHOST/PGPORT (default 127.0.0.1:5433) as PGUSER (default yugabyte); supply the password through PGPASSWORD or ~/.pgpass.

Cara pemeriksaan

Metode audit: Kueri SQL

sql_query

out=$(ysqlsh -h "${PGHOST:-127.0.0.1}" -p "${PGPORT:-5433}" -U "${PGUSER:-yugabyte}" -d "${PGDATABASE:-yugabyte}" -tAc "SHOW debug_print_parse" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Output yang diharapkan: off

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Set it with the YB-TServer GFlag --ysql_pg_conf_csv="debug_print_parse='off'" on every YB-TServer and restart it.

Properti

Sistem operasi: Apa saja
Tag: yugabytedblogging
Referensi: CIS YugabyteDB Benchmark v2.0.0 - 3.1.13 Ensure 'debug_print_parse' is disabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target yugabytedb