1. Home
  2. Security Hardening
  3. CIS MySQL 5.7 Enterprise Windows OS L1 V1.0.0
  4. Ensure ‘log-raw’ Is Set to ‘OFF’ – %PROGRAMDATA%MySQLMySQL Server 5.7my.cnf – Doesn’t exist

Ensure ‘log-raw’ Is Set to ‘OFF’ – %PROGRAMDATA%MySQLMySQL Server 5.7my.cnf – Doesn’t exist

Details

With raw logging of passwords enabled someone with access to the log files might see plain text passwords.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Perform the following actions to remediate this setting: Open the MySQL configuration file (my.cnf) Find the log-raw entry and set it as follows log-raw = OFF

Supportive Information

The following resource is also helpful.

This control applies to the following type of system Windows.

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles