The Backups Should be Properly Secured

SrednjaNivo 1Ručni pregledmariadb

Opis

The backup files will contain all data in the databases. Filesystem permissions and/or encryption should be used to prevent unauthorized users from gaining access to the backups.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Check who can access backup files: they must not be world-readable or in a world-readable directory, group access only for a backup-specific group, offsite copies restricted, and backups encrypted with a key stored separately (not a guessable password).

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Restrict backup files and directories (e.g. chmod 600/700, backup-specific owner/group), encrypt backups, and store the encryption key separately from the backups.

Svojstva

Operativni sistemi: Bilo koji
Oznake: mariadbdatabasebackupmanual
Referenca: CIS MariaDB 10.11 Benchmark v1.0.0 - 2.1.4 The Backups Should be Properly Secured