Secure Backup Credentials

SrednjaNivo 1Ručni pregledmariadb

Opis

A database user with the least amount of privileges required to perform backup is needed. The credentials for this user should be protected. The password, certificate, and any other credentials should be protected.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Check permissions of files containing backup passwords and/or SSL keys (ls -l on option files and key files used by backup jobs); they must be readable only by the backup account.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

chmod 600 the files holding backup credentials/keys and chown them to the backup user; prefer an option file over passwords on the command line.

Svojstva

Operativni sistemi: Bilo koji
Oznake: mariadbdatabasebackupcredentialsmanual
Referenca: CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.3 Secure Backup Credentials