Details

MySQL can operate using a variety of log files, each used for different purposes. These are the binary log, error log, slow query log, relay log, and general log. Because these are files on the host operating system, they are subject to the permissions structure provided by the host and may be accessible by users other than the MySQL user.

Solution

Execute the following command for each log file location requiring corrected permissions:
chmod 660
chown mysql:mysql

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1623

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability, Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|AU-9(4)
• 800-53|CM-6b.

Source

• Tenable.com/audits