Re: [NSE] Auditing MySQL databases against the CIS benchmark

[Vlatko Kosturjak <kost () linux hr>]

On 05/31/2011 10:41 AM, Paulino Calderon wrote:
> Hi,
>
> |       3.1: Skip symbolic links => SUCCESS
> |       3.2: Logs not on system partition => SUCCESS
> |       3.2: Logs not on database partition => SUCCESS
> |       4.1: Supported version of MySQL => REVIEW
> |       4.5: Change admin account name => FAIL

Nice script!

I would just suggest to have PASS or similar wording instead of SUCCESS
as SUCCESS can lead to confusion (does SUCCESS mean testing was
successful, or success to find the finding or that recommendation is
implemented correctly....)

Kost
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/