Re: [NSE] Auditing MySQL databases against the CIS benchmark

[Patrik Karlsson <patrik () cqure net>]

On Jun 1, 2011, at 8:24 AM, Vlatko Kosturjak wrote:

> On 05/31/2011 10:41 AM, Paulino Calderon wrote:
> > Hi,
> >
> > |       3.1: Skip symbolic links => SUCCESS
> > |       3.2: Logs not on system partition => SUCCESS
> > |       3.2: Logs not on database partition => SUCCESS
> > |       4.1: Supported version of MySQL => REVIEW
> > |       4.5: Change admin account name => FAIL
>
> Nice script!
>
> I would just suggest to have PASS or similar wording instead of SUCCESS
> as SUCCESS can lead to confusion (does SUCCESS mean testing was
> successful, or success to find the finding or that recommendation is
> implemented correctly....)
>
> Kost
> _______________________________________________
> Sent through the nmap-dev mailing list
> http://cgi.insecure.org/mailman/listinfo/nmap-dev
> Archived at http://seclists.org/nmap-dev/


Thanks for the feedback Vlatko.
I've changed to PASS instead of SUCCESS as suggested.
I'm attaching an updated version.

Attachment: mysql-audit.nse
Description:

Attachment: mysql-cis.audit
Description:

//Patrik

--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/