Ensure Password Reuse Restrictions Are Configured

SrednjaNivo 2Automatskatdsql

Opis

Password reuse restrictions prevent users from reusing recently used passwords when changing their password. Runs the mysql client against the TDSQL data node selected by TDSQL_MYSQL_OPTS (e.g. "-h10.0.0.5 -P4001 -utdsql_audit"); keep the password in ~/.my.cnf or a login path rather than MYSQL_PWD or the command line (see 1.4 and 1.5). Passes when password_history >= 5 and password_reuse_interval >= 365.

Kako se proverava

Metod provere: SQL upit

sql_query

out=$(mysql ${TDSQL_MYSQL_OPTS:-} -NBe "SELECT CASE WHEN @@global.password_history >= 5 AND @@global.password_reuse_interval >= 365 THEN 'compliant' ELSE 'noncompliant' END" 2>/dev/null) || exit 1; printf '%s\n' "$out"

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

SET GLOBAL password_history = 5; SET GLOBAL password_reuse_interval = 365;

Svojstva

Operativni sistemi: Bilo koji
Oznake: tdsqlauthentication
Referenca: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 7.6 Ensure Password Reuse Restrictions Are Configured

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target tdsql --level 2