Ensure ‘mysqld’ Is Not Started with ‘–skip-grant-tables’ – %WINDIR%my.cnf
Details If this option is used, all clients of the affected server will have unrestricted access to all databases. Solution...
- Home
- Security Hardening
- CIS MySQL 5.7 Enterprise Windows OS L1 V1.0.0
CIS MySQL 5.7 Enterprise Windows OS L1 V1.0.0
Ensure ‘mysqld’ Is Not Started with ‘–skip-grant-tables’ – %WINDIR%my.cnf – Doesn’t exist
Details If this option is used, all clients of the affected server will have unrestricted access to all databases. NOTE:...Ensure ‘mysqld’ Is Not Started with ‘–skip-grant-tables’ – %WINDIR%my.ini
Details If this option is used, all clients of the affected server will have unrestricted access to all databases. Solution...Ensure ‘mysqld’ Is Not Started with ‘–skip-grant-tables’ – %WINDIR%my.ini – Doesn’t exist
Details If this option is used, all clients of the affected server will have unrestricted access to all databases. NOTE:...Ensure Plugin Directory Has Appropriate Permissions and Ownership
Details Limiting the accessibility of these objects will protect the confidentiality, integrity, and availability of the MySQL database. If someone...Ensure ‘relay_log_basename’ Files Have Appropriate Permissions and Ownership
Details Limiting the accessibility of these objects will protect the confidentiality, integrity, and availability of the MySQL logs. Solution Execute...Ensure ‘slow_query_log’ Has Appropriate Permissions and Ownership
Details Limiting the accessibility of these objects will protect the confidentiality, integrity, and availability of the MySQL logs. Solution Execute...Ensure SSL Key Files Have Appropriate Permissions and Ownership
Details Limiting the accessibility of these objects will protect the confidentiality, integrity, and availability of the MySQL database and the...Place Databases on Non-System Partitions
Details Moving the database off the system partition will reduce the probability of denial of service via the exhaustion of...Use Dedicated Least Privileged Account for MySQL Daemon/Service
Details Utilizing a least privilege account for MySQL to execute as may reduce the impact of a MySQL-born vulnerability. A...