Securely Define Stored Procedures and Functions DEFINER and INVOKER

СредњаНиво 1Ручни прегледmysql

Опис

Stored procedure and stored function declarations include a definition of permissions which can be used to escalate permissions. It's important to inspect these settings to ensure they do not unnecessarily escalate privileges.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Run SHOW PROCEDURE STATUS; and SHOW FUNCTION STATUS; and inspect Definer and Security_type. For SQL SECURITY DEFINER routines owned by powerful users, review the code (SHOW CREATE PROCEDURE/FUNCTION <name>) and information_schema.routines/parameters.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Use SQL SECURITY INVOKER where possible, or set DEFINER to a least-privileged account (ALTER/CREATE ... DEFINER=...), and restrict EXECUTE on sensitive routines.

Својства

Оперативни системи: Било који
Ознаке: mysqldatabaseauthorizationmanual
Референца: CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 5.10 Securely Define Stored Procedures and Functions DEFINER and INVOKER