Skip to content

Commit a2faf0b

Browse files
authored
BREAKING: config-files should be owned by mysql-user (#56)
* BREAKING: config-files should be owned by mysql-user Signed-off-by: Sebastian Gumprich <github@gumpri.ch> * conf-files should belong to user root Signed-off-by: Sebastian Gumprich <github@gumpri.ch>
1 parent e37d598 commit a2faf0b

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

controls/mysql_conf.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -123,22 +123,22 @@
123123

124124
control 'mysql-conf-07' do
125125
impact 0.7
126-
title 'ensure the mysql config file is owned by root'
126+
title 'ensure the mysql config file is owned by user root, group mysql'
127127
describe file(mysql_config_file) do
128128
it { should be_file }
129129
it { should be_owned_by 'root' }
130-
it { should be_grouped_into 'root' }
130+
it { should be_grouped_into 'mysql' }
131131
it { should_not be_readable.by('others') }
132132
end
133133
end
134134

135135
# test this only if we have a mysql_hardening_file
136136
control 'mysql-conf-08' do
137137
impact 0.5
138-
title 'ensure the mysql hardening config file is owned by root'
138+
title 'ensure the mysql hardening config file is owned by user root, group mysql'
139139
describe file(mysql_hardening_file) do
140140
it { should be_owned_by 'root' }
141-
it { should be_grouped_into 'root' }
141+
it { should be_grouped_into 'mysql' }
142142
it { should_not be_readable.by('others') }
143143
end
144144
only_if { command("ls #{mysql_hardening_file}").exit_status.zero? }

0 commit comments

Comments
 (0)