Point-in-Time Recovery

보통레벨 2자동mariadb

설명

With binlogs it is possible to implement point-in-time recovery. This makes it possible to restore the changes between the last full backup and the point-in-time. Enabling binlogs is not sufficient. The binlogs need to be backed up to separate media. The restore procedure should be created and tested. Passes when binary logging is enabled and binlog_expire_logs_seconds is not 0. Runs mariadb -NBe with the client defaults: as root on the server the unix_socket plugin usually authenticates; otherwise put an administrative account in ~/.my.cnf (mode 0600), not MYSQL_PWD (see 1.4/1.6).

점검 방법

감사 방식: SQL 쿼리

sql_query

out=$(mariadb -NBe "SELECT IF(@@global.log_bin = 1 AND @@global.binlog_expire_logs_seconds <> 0, 'compliant', 'noncompliant')" 2>/dev/null) || exit 1; printf '%s\n' "$out"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Set log_bin=<path> and binlog_expire_logs_seconds=<retention seconds, not 0> under [mariadbd] in /etc/mysql/mariadb.conf.d/50-server.cnf (or /etc/my.cnf.d/server.cnf), then create and test a point-in-time restore procedure, then restart MariaDB.

속성

운영 체제: 모두
태그: mariadbdatabasebackupbinlog
참고 자료: CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.5 Point-in-Time Recovery

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target mariadb --level 2