Ensure 'data_dir' Has Appropriate Permissions

YüksekDüzey 1Manuel incelemeoceanbase

Açıklama

The cluster-level configuration parameter 'data_dir' displays the directory for storing data such as SSTables. Currently, it is read-only and cannot be modified.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Run SELECT svr_ip, name, value FROM oceanbase.GV$OB_PARAMETERS WHERE name = 'data_dir'; then on each host ls -ld <data_dir> (ls -ldL if it is a symlink; default /home/admin/oceanbase/store). The directory must be mode 750 (drwxr-x---) or stricter and owned by the admin user and group; any world access or other owner is a finding.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To remediate incorrect permissions or ownership on the OceanBase data directory: 1. Confirm the current permissions and ownership: ls -ld /data/1 2. Set the correct ownership to the admin user and group: sudo chown admin:admin /data/1 3. Restrict permissions to owner read/write/execute and group read/execute only: sudo chmod 750 /data/1 4. Verify the change: ls -ld /data/1 Expected output: drwxr-x--- 10 admin admin 4096 Jan 1 10:00 /data/1

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: oceanbasepermissions
Referans: CIS OceanBase Enterprise Edition V4 Benchmark v1.0.0 - 1.3 Ensure 'data_dir' Has Appropriate Permissions