377 字
2 分钟
等保:MySQL 数据库测评
MySQL
mysql -u 用户名 -p 密码
show databases; //查看数据库use mysql; //进入数据库mysql> select user,host from mysql.user; //查询用户信息
host --- 登录方式localhost --- 本地登录% --- 支持远程连接x.x.x.x --- 使用地址x.x.x.x远程连接mysql> show variables like "%validate_password%"; //密码复杂度+--------------------------------------+--------+| Variable_name | Value |+--------------------------------------+--------+.....................................| validate_password.length | 8 | --- 密码最小长度| validate_password.mixed_case_count | 1 | --- 最少包含一个大小写字母| validate_password.number_count | 1 | --- 最少包含一个数字| validate_password.policy | MEDIUM | --- 当前执行的密码策略为中级| validate_password.special_char_count | 1 | --- 最少包含一个特殊字符+--------------------------------------+--------+
LOW --- 0 --- 只检查密码长度MEDIUM --- 1 --- 检查密码长度,数字,大小写字母,特殊字符STRONG --- 2 --- 检查密码长度,数字,大小写字母,特殊字符,字典文件
mysql> show variables like '%lifetime%'; //密码有效期+---------------------------+-------+| Variable_name | Value |+---------------------------+-------+| default_password_lifetime | 0 | --- 0表示永不过期+---------------------------+-------+数据库非必要不更新
整改:
set global 属性项名称 = 要修改的值;
mysql> set global default_password_lifetime = 90;show variables like "%connection_control%" //登录失败处理功能show variables like "%timeout%"; //连接超时mysql> show variables like '%have_ssl%'; //远程管理防窃听+---------------+-------+| Variable_name | Value |+---------------+-------+| have_ssl | YES | 符合+---------------+-------+mysql> create user '用户名'@'登录方式' identified by '密码'; //创建用户mysql> create user 'sec'@'localhost' identified by 'Aa@1234.';
mysql> update mysql.user set user='新用户名' where user='旧用户名'; //修改用户名
drop user '用户名'@'登录方式'; //删除用户 等保:MySQL 数据库测评
https://wangyi187.top/posts/mlps-15-mysql/
闽公网安备 35050402880173号