Ensure Sensitive Configuration Data Is Encrypted

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

# Check for cleartext passwords in the configuration grep -rn 'password' /path/to/tdsql/conf/ | grep -v '#' | head -20 # Encrypted passwords appear as long base64-encoded strings. # Short, simple cleartext strings indicate unencrypted passwords.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Encrypt all passwords using TDSQL's encryption tools. Ensure the master key used for encryption is stored separately from the encrypted data and managed by an independent key management process. Integrating with a KMS is strongly recommended. Encryption process overview: 1.