6.7 Set audit_log_strategy to SYNCHRONOUS or SEMISYNCRONOUS

Information

The audit_log_strategy must be set to SYNCHRONOUS or SEMISYNCHRONOUS

Rationale:

This setting controls how information is written to the audit log. It can be set to SYNCHRONOUS to make it fully durable or other settings which are less durable but have less performance overhead.

Impact:

If this setting is set to PERFORMANCE or ASYNCHRONOUS audit events might be lost in case of a crash or when the server somehow can't write to the audit log file.

Solution

To remediate this configuration:

Open the MySQL configuration file (my.cnf)

Navigate to the mysqld section of the configuration file

Set audit_log_strategy='SEMISYNCHRONOUS' (or SYNCHRONOUS)

Default Value:

ASYNCHRONOUS

See Also

https://workbench.cisecurity.org/files/3855