Place Databases on Non-System Partitions

낮음레벨 1수동 검토mysql

설명

It is generally accepted that host operating systems should include different filesystem partitions for different purposes. One set of filesystems is typically called system partitions, and these are generally reserved for host system/application operation.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Find the data and log locations: SELECT VARIABLE_NAME, VARIABLE_VALUE FROM performance_schema.global_variables WHERE (VARIABLE_NAME LIKE '%dir' OR VARIABLE_NAME LIKE '%file') AND VARIABLE_NAME NOT LIKE '%core%'; then run df -h <directory> for datadir and the others. They must not be on the root (/), /var or /usr partitions.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Create a dedicated partition/volume for the data, stop MySQL, move datadir there (copy preserving ownership mysql:mysql), update datadir in /etc/my.cnf (or /etc/mysql/mysql.conf.d/mysqld.cnf) and any SELinux/AppArmor policy, then start MySQL.

속성

운영 체제: 모두
태그: mysqldatabasefilesystemmanual
참고 자료: CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 1.1 Place Databases on Non-System Partitions