CIS Oracle MySQL Enterprise Edition 8.4 v1.0.0 L1 MySQL OS Linux

This audit file has been deprecated and will be removed in a future update.

Name: CIS Oracle MySQL Enterprise Edition 8.4 v1.0.0 L1 MySQL OS Linux

Updated: 1/14/2026

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 27

Filename: CIS_MySQL_8.4_Enterprise_Benchmark_v1.0.0_Level_1_OS_Linux.audit

Size: 45.9 kB

MD5: 3ed16eb807f9cf7b8db47dfdff653840

SHA256: 6dc7630ea2d2ad3f38652396d093621e47b6c186f2fe326d86a66074fc65938d

Description	Categories
1.1 Place Databases on Non-System Partitions
1.2 Use Dedicated Least Privileged Account for MySQL Daemon/Service
1.4 Verify That the MYSQL_PWD Environment Variable is Not in Use
1.6 Verify That 'MYSQL_PWD' is Not Set in Users' Profiles
2.1.1 Backup Policy in Place
2.1.2 Verify Backups are Good
2.1.3 Secure Backup Credentials
2.1.4 The Backups Should be Properly Secured
2.1.6 Disaster Recovery (DR) Plan
2.1.7 Backup of Configuration and Related Files
2.3 Dedicate the Machine Running MySQL
2.4 Do Not Specify Passwords in the Command Line
2.6 Ensure Non-Default, Unique Cryptographic Material is in Use
3.1 Ensure 'datadir' Has Appropriate Permissions
3.2 Ensure 'log_bin_basename' Files Have Appropriate Permissions
3.3 Ensure 'log_error' Has Appropriate Permissions
3.4 Ensure 'slow_query_log' Has Appropriate Permissions
3.5 Ensure 'relay_log_basename' Files Have Appropriate Permissions
3.6 Ensure 'general_log_file' Has Appropriate Permissions
3.7 Ensure SSL Key Files Have Appropriate Permissions
3.8 Ensure Plugin Directory Has Appropriate Permissions
3.9 Ensure 'audit_log_file' Has Appropriate Permissions
3.10 Secure MySQL Keyring
4.5 Ensure 'mysqld' is Not Started With '--skip-grant-tables'
6.4 Ensure 'log-raw' is Set to 'OFF'
7.2 Ensure Passwords are Not Stored in the Global Configuration
CIS_MySQL_8.4_Enterprise_Benchmark_v1.0.0_Level_1_OS_Linux.audit from CIS Oracle MySQL 8.4 Enterprise Edition Benchmark