Ensure 'AUTO_CLOSE' is set to 'OFF' on contained databases

低级别 1自动化mssql

说明

AUTO_CLOSE determines if a given database is closed or not after a connection terminates. If enabled, subsequent connections to the given database will require the database to be reopened and relevant procedure caches to be rebuilt. Because authentication of users for contained databases occurs within the database not at the server\instance level, the database must be opened every time to authenticate a user. The frequent opening/closing of the database consumes additional server resources and may contribute to a denial of service.

检查方式

审计方法: SQL 查询

sql_query

sqlcmd -b -h -1 -W -Q "SET NOCOUNT ON; SELECT COUNT(*) FROM sys.databases WHERE containment <> 0 AND is_auto_close_on = 1;"

预期输出: 0

修复方式

修复方法: 操作指南或基础设施补丁

Execute the following T-SQL, replacing <database_name> with each database name found by the Audit Procedure: ALTER DATABASE <database_name> SET AUTO_CLOSE OFF;

属性

操作系统: 任意
标签: mssqlsqlserver-2022
参考: CIS Microsoft SQL Server 2022 Benchmark v1.3.0 - 2.15 Ensure 'AUTO_CLOSE' is set to 'OFF' on contained databases

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target mssql