4.7 Ensure the 'daemon_memcached' Plugin is Disabled

Information

The InnoDB memcached Plugin allows users to access data stored in InnoDB with the memcached protocol.

Rationale:

By default, the plugin doesn't do authentication, which means that anyone with access to the TCP/IP port of the plugin can access and modify the data. However, not all data is exposed by default.

Solution

To remediate this setting, issue the following command in the MySQL command-line client:

uninstall plugin daemon_memcached;

This uninstalls the memcached plugin from the MySQL server.

Default Value:

disabled

See Also

https://workbench.cisecurity.org/files/3855

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: MySQLDB

Control ID: 54aaaf81accfd128cabf900d168eabb73a8c40dc68ef10d9f037abf16fd7fd71