Ensure OSS Super User Password Auto-Rotation Is Enabled

中等級 2人工審核tdsql

說明

The OSS super user (osssuper) supports automatic password rotation (<super_user ... rotation="1"/> in scheduler.xml). When enabled, OSS automatically resets the super user password on a preset cycle and writes the new password back to the configuration in encrypted form.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Run grep '<super_user' <tdsql>/conf/scheduler.xml and confirm the element has rotation="1" (and an encrypted pwd that differs from the install template). rotation="0" or a missing attribute is a finding.

修補方式

修補方法: 操作指南或基礎設施修補檔

<super_user username="osssuper" pwd="<encrypted_strong_password>" host="10.0.0.0/8" rotation="1"/>

屬性

作業系統: 不限
標籤: tdsqlcredentialsoss
參考資料: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 12.8 Ensure OSS Super User Password Auto-Rotation Is Enabled