TMA-MARIADB-7.6
Ensure No Anonymous Accounts Exist
VisokaNivo 1Automatskamariadb
Opis
Anonymous accounts are users with empty usernames (''). Anonymous accounts have no passwords, so anyone can use them to connect to the MariaDB server. Runs mariadb -NBe with the client defaults: as root on the server the unix_socket plugin usually authenticates; otherwise put an administrative account in ~/.my.cnf (mode 0600), not MYSQL_PWD (see 1.4/1.6).
Kako se proverava
Metod provere: SQL upit
sql_query
out=$(mariadb -NBe "SELECT COUNT(*) FROM mysql.user WHERE user = ''" 2>/dev/null) || exit 1; printf '%s\n' "$out"- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
DROP USER ''@'<host>'; for each anonymous account (or run mariadb-secure-installation).
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- mariadbdatabaseauthentication
- Referenca
- CIS MariaDB 10.11 Benchmark v1.0.0 - 7.6 Ensure No Anonymous Accounts Exist
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target mariadb