Details

Limiting the accessibility of these objects will protect the confidentiality, integrity, and availability of the MySQL logs.

Solution

Execute the following command for each log file location requiring corrected permissions and ownership: chmod 660 chown mysql:mysql Impact: Changing the permissions and ownership of the log files might impact monitoring tools which use a logfile adapter. If the permissions on the binary log files are accidentally changed to exclude the user account which is used to run the MySQL service, then this might break replication. The binary log file can be used for point in time recovery so this can also affect backup, restore and disaster recovery procedures.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1619

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability, Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|AU-9(4)
• 800-53|CM-6b.

Source

• Tenable.com/audits