Detections
Analytics

CIS MySQL 5.7 Enterprise Windows OS L1 v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS MySQL 5.7 Enterprise Windows OS L1 v1.0.0

Updated: 12/7/2022

Authority: CIS

Plugin: Windows

Revision: 1.18

Estimated Item Count: 56

File Details

Filename: CIS_MySQL_5.7_Enterprise_Benchmark_v1.0.0_Level_1_OS_MS.audit

Size: 87.4 kB

MD5: 32418e681c21936cd87b4fdd983ce2e6
SHA256: 70350f02d96a7ea93055a429d6a907cfd7684dfb3cfda78d6a7843320072659d

Audit Items

DescriptionCategories
1.1 Place Databases on Non-System Partitions
1.2 Use Dedicated Least Privileged Account for MySQL Daemon/Service
1.4 Verify that 'MYSQL_PWD' Is Not Set
2.1 Dedicate Machine Running MySQL
2.2 Do Not Specify Passwords in Command Line
2.3 Do Not Reuse User Accounts
3.1 Ensure 'datadir' Has Appropriate Permissions and Ownership
3.2 Ensure 'log_bin_basename' Files Have Appropriate Permissions and Ownership
3.3 Ensure 'log_error' Has Appropriate Permissions and Ownership
3.4 Ensure 'slow_query_log' Has Appropriate Permissions and Ownership
3.5 Ensure 'relay_log_basename' Files Have Appropriate Permissions and Ownership
3.6 Ensure 'general_log_file' Has Appropriate Permissions and Ownership
3.7 Ensure SSL Key Files Have Appropriate Permissions and Ownership
3.8 Ensure Plugin Directory Has Appropriate Permissions and Ownership
3.9 Ensure 'audit_log_file' has Appropriate Permissions and Ownership
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - MYSQL_INSTALL\my.cnf
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - MYSQL_INSTALL\my.cnf - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - MYSQL_INSTALL\my.ini
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - MYSQL_INSTALL\my.ini - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.cnf
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.cnf - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.ini Does not Exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.ini Exists
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %WINDIR%\my.cnf
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %WINDIR%\my.cnf - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %WINDIR%\my.ini
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - %WINDIR%\my.ini - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - C:\my.cnf
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - C:\my.cnf - Doesn't exist
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - C:\my.ini
4.5 Ensure 'mysqld' Is Not Started with '--skip-grant-tables' - C:\my.ini - Doesn't exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.cnf
6.4 Ensure 'log-raw' Is Set to 'OFF' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.cnf - Doesn't exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.ini Exists
6.4 Ensure 'log-raw' Is Set to 'OFF' - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.ini Exists - Doesn't exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - %WINDIR%\my.cnf
6.4 Ensure 'log-raw' Is Set to 'OFF' - %WINDIR%\my.cnf - Doesn't Exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - %WINDIR%\my.ini
6.4 Ensure 'log-raw' Is Set to 'OFF' - %WINDIR%\my.ini - Doesn't Exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - C:\my.cnf
6.4 Ensure 'log-raw' Is Set to 'OFF' - C:\my.cnf - Doesn't Exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - C:\my.ini
6.4 Ensure 'log-raw' Is Set to 'OFF' - C:\my.ini - Doesn't Exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - MYSQL_INSTALL\my.cnf
6.4 Ensure 'log-raw' Is Set to 'OFF' - MYSQL_INSTALL\my.cnf - Doesn't Exist
6.4 Ensure 'log-raw' Is Set to 'OFF' - MYSQL_INSTALL\my.ini
6.4 Ensure 'log-raw' Is Set to 'OFF' - MYSQL_INSTALL\my.ini - Doesn't exist
7.3 Ensure Passwords Are Not Stored in the Global Configuration - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.cnf
7.3 Ensure Passwords Are Not Stored in the Global Configuration - %PROGRAMDATA%\MySQL\MySQL Server 5.7\my.ini
7.3 Ensure Passwords Are Not Stored in the Global Configuration - %WINDIR%\my.cnf