TMAegis
Više pravila za mysql

TMA-MYSQL-2.5

Do Not Reuse Usernames

NiskaNivo 1Ručni pregledmysql

Opis

Database user accounts should not be reused for multiple applications or users.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

List accounts: SELECT host, user, plugin FROM mysql.user WHERE user NOT IN ('mysql.infoschema','mysql.session','mysql.sys'); Each account must belong to exactly one system account, person or application; shared or reused usernames are a fail.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Create a separate account per person, application and system account, migrate their grants, and drop the shared accounts.

Svojstva

Operativni sistemi
Bilo koji
Oznake
mysqldatabaseauthenticationmanual
Referenca
CIS Oracle MySQL Community Server 8.4 Benchmark v1.1.0 - 2.5 Do Not Reuse Usernames