TMAegisBeta
更多 tdsql 规则

TDSQL

TMA-TDSQL-10.3

Ensure Strong Synchronous Replication Is Used

中级别 1自动化tdsql

说明

TDSQL's strong synchronous (sqlasyn) mechanism ensures a transaction returns success only after it is confirmed on both the primary and replica nodes, guaranteeing no data loss. Runs the mysql client against the TDSQL data node selected by TDSQL_MYSQL_OPTS (e.g. "-h10.0.0.5 -P4001 -utdsql_audit"); keep the password in ~/.my.cnf or a login path rather than MYSQL_PWD or the command line (see 1.4 and 1.5).

检查方式

审计方法: SQL 查询

sql_query
out=$(mysql ${TDSQL_MYSQL_OPTS:-} -NBe "SHOW GLOBAL VARIABLES LIKE 'sqlasyn'" 2>/dev/null) || exit 1; v=$(printf '%s\n' "$out" | awk -F'\t' '$1 == "sqlasyn" {print toupper($2)}'); case "$v" in ON|1) echo compliant;; *) echo "value '$v'";; esac
预期输出
compliant

修复方式

修复方法: 操作指南或基础设施补丁

SET GLOBAL sqlasyn = ON; through the OSS management platform and persist it in the parameter template.

属性

操作系统
任意
标签
tdsqlreplication
参考
CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 10.3 Ensure Strong Synchronous Replication Is Used

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell
tmaegis scan --target tdsql