diff --git a/MYSQL-CIS-Audit.ps1 b/MYSQL-CIS-Audit.ps1 new file mode 100644 index 0000000..b4f77f9 --- /dev/null +++ b/MYSQL-CIS-Audit.ps1 @@ -0,0 +1,270 @@ +# SecureLayer7 MYSQL Audit Script +# Developed and Modified By Sandeep Kamble for the official purpose only +# This configuration review script is developed according to specific needs. +# Last Update Data: 7 July, 2016 +# Use following command to run this script +# Set-ExecutionPolicy Unrestricted +# ./MYSQL-CIS-Audit.ps1 + +Write-Host "Enter your username for mysql (root recommended)" +$username = Read-Host + +Write-Host "Databse ip adress" +$ipaddr = Read-Host + +Write-Host "Enter name database :" +$dbname = Read-Host + +Write-Host "Enter database port :" +$port = Read-Host + +Write-Host "Enter password (password will show on prompt)" +$password = Read-Host + +# CREATING DIRECTORIES: RESULTS +Write-Host "CREATING DIRECTORIES : RESULTS" +New-Item -ItemType Directory -Path "results_$dbname" -Force | Out-Null + +# General Information for MYSQL Audit +Write-Host "SecureLayer7 MYSQL Audit Started" + +$connectionString = "mysql -h $ipaddr -u $username -p$password -P$port $dbname -e" +Write-Host $connectionString + +# Time and Date +Add-Content -Path "results_$dbname/System_info.txt" -Value "Time and Date" +Invoke-Expression "$connectionString `"`SELECT NOW()`"" | Out-File -Append -FilePath "results_$dbname/System_info.txt" + +# MYSQL VERSION +Add-Content -Path "results_$dbname/System_info.txt" -Value "MYSQL VERSION" +Invoke-Expression "$connectionString `"`show variables like '%version%'`""| Out-File -Append -FilePath "results_$dbname/System_info.txt" + +# USERS +Add-Content -Path "results_$dbname/Users.txt" -Value "USERS" +Invoke-Expression "$connectionString `"`select user,host from mysql.user`""| Out-File -Append -FilePath "results_$dbname/Users.txt" + +# CURRENT USERS +Add-Content -Path "results_$dbname/Users.txt" -Value "CURRENT USERS" +Invoke-Expression "$connectionString `"`show processlist`"" | Out-File -Append -FilePath "results_$dbname/Users.txt" + +# ALL VARIABLES +Add-Content -Path "results_$dbname/All_variables.txt" -Value "ALL VARIABLES" +Invoke-Expression "$connectionString `"`show variables`"" | Out-File -Append -FilePath "results_$dbname/All_variables.txt" + +# DATABASES +Add-Content -Path "results_$dbname/Databases.txt" -Value "DATABASES" +Invoke-Expression "$connectionString `"`show databases`""| Out-File -Append -FilePath "results_$dbname/Databases.txt" +Invoke-Expression "$connectionString `"`show databases`""| Select-String -Pattern "Database" -NotMatch | Out-File -FilePath "results_$dbname/mysql_databases.txt" + +# TLS VERSION +Add-Content -Path "results_$dbname/Databases.txt" -Value "TLS VERSION" +Invoke-Expression "$connectionString `"`select @@tls_version`""| Out-File -Append -FilePath "results_$dbname/Databases.txt" + +# ALL TABLES FROM ALL DATABASES +Add-Content -Path "results_$dbname/Tables_from_databases.txt" -Value "ALL TABLES FROM ALL DATABASES" +Invoke-Expression "$connectionString `"`select table_schema, table_name from information_schema.tables`""| Out-File -Append -FilePath "results_$dbname/Tables_from_databases.txt" +Invoke-Expression "$connectionString `"`select table_schema, table_name from information_schema.tables`""| Out-File -Append -FilePath "results_$dbname/mysql_tables.txt" + +# TABLES FROM ALL DATABASES EXCEPT INTERNAL +Add-Content -Path "results_$dbname/Not_system_tables.txt" -Value "TABLES FROM ALL DATABASES EXCEPT INTERNAL" +Invoke-Expression "$connectionString `"`SELECT table_schema, table_name FROM information_schema.tables WHERE table_schema NOT IN ('information_schema', 'performance_schema', 'mysql')`""| Out-File -Append -FilePath "results_$dbname/Not_system_tables.txt" + +# Operating System Level Configuration +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Starting of MYSQL Audit" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.1" +Invoke-Expression "$connectionString `"`show variables where variable_name = 'datadir'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" + +# Auditing Guidance for section 3.2 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.2" +Invoke-Expression "$connectionString `"`show variables like 'log_bin_basename'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" + +# Auditing Guidance for section 2.2 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 2.2" +Invoke-Expression "$connectionString `"`show variables like 'basedir'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Logging +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Logging" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 3.3 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.3" +Invoke-Expression "$connectionString `"`show variables like 'log_error'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 3.3 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.3" +Invoke-Expression "$connectionString `"`show variables like 'log_bin'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 3.4 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.4" +Invoke-Expression "$connectionString `"`show variables like 'slow_query_log'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 3.5 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 3.5" +Invoke-Expression "$connectionString `"`show variables like 'relay_log_basename'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 4.9 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.9" +Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'sql_mode'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 7.5 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.5" +Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'default_password_lifetime'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 7.6 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.6" +Invoke-Expression "$connectionString `"`SHOW VARIABLES LIKE 'validate_password%'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 4.5 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.5" +Invoke-Expression "$connectionString `"`select user from mysql.user where user = 'root'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 4.9 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.9" +Invoke-Expression "$connectionString `"`select user from mysql.user where host = '%'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 4.10 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.10" +Invoke-Expression "$connectionString `"`select user, password from mysql.user where length(password) = 0 or password is null`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 4.11 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 4.11" +Invoke-Expression "$connectionString `"`select user from mysql.user where user = ''`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# MySQL Permissions +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "MySQL Permissions" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 5.1 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.1" +Invoke-Expression "$connectionString `"`select user, host from mysql.user where (Select_priv = 'Y') or (Insert_priv = 'Y') or (Update_priv = 'Y') or (Delete_priv = 'Y') or (Create_priv = 'Y') or (Drop_priv = 'Y')`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Invoke-Expression "$connectionString `"`select user, host from mysql.db where db = 'mysql' and ((Select_priv = 'Y') or (Insert_priv = 'Y') or (Update_priv = 'Y') or (Delete_priv = 'Y') or (Create_priv = 'Y') or (Drop_priv = 'Y'))`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 5.2 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.2" +Invoke-Expression "$connectionString `"`select user, host from mysql.user where File_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 5.3 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.3" +Invoke-Expression "$connectionString `"`select user, host from mysql.user where Process_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 5.4 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.4" +Invoke-Expression "$connectionString `"`select user, host from mysql.user where Super_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 5.5 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.5" +Invoke-Expression "$connectionString `"`select user, host from mysql.user where Shutdown_priv ='Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" + +# Blank line +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 5.6 " +Invoke-Expression "$connectionString `"`select user, host from mysql.user where Create_user_priv = 'Y'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# MySQL Configuration +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "MySQL Configuration" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.2 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.2" +Invoke-Expression "$connectionString `"`show variables like 'local_infile'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.3 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.3" +Invoke-Expression "$connectionString `"`show variables like 'old_passwords'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.4 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.4" +Invoke-Expression "$connectionString `"`show variables like 'safe_show_database'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.5 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.5" +Invoke-Expression "$connectionString `"`show variables like 'secure_auth'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.6 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.6" +Invoke-Expression "$connectionString `"`show variables like 'skip_grant_table'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.7 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.7" +Invoke-Expression "$connectionString `"`show variables like 'have_merge_engin'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.8 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.8" +Invoke-Expression "$connectionString `"`show variables like skip_networking'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 6.10 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 6.10" +Invoke-Expression "$connectionString `"`show variables like 'have_symlink'`"" | Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# SSL Configuration +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "SSL Configuration" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "################################" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value " " + +# Auditing Guidance for section 7.2 +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "Auditing Guidance for section 7.2" +Invoke-Expression "$connectionString `"`show variables like 'have_openssl'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Invoke-Expression "$connectionString `"`show variables like 'ssl_key'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Invoke-Expression "$connectionString `"`show variables like 'ssl_ca'`""| Out-File -Append -FilePath "results_$dbname/MYSQLAudit.txt" +Add-Content -Path "results_$dbname/MYSQLAudit.txt" -Value "##################END AUDIT##############" +Write-Host "##################END MYSQL AUDIT##############" +Write-Host "ZIP the result folder and email to consultant" diff --git a/MYSQLAudit.sh b/MYSQLAudit.sh index f0594f3..6e0bf16 100644 --- a/MYSQLAudit.sh +++ b/MYSQLAudit.sh @@ -45,6 +45,9 @@ echo "DATABASES" >> results/Databases.txt echo 'show databases'| mysql -u$username -p$password >> results/Databases.txt echo 'show databases'| mysql -u$username -p$password |grep -v Database>> results/mysql_databases +echo "TLS VERSION" >> results/Databases.txt +echo 'select @@tls_version'| mysql -u$username -p$password >> results/Databases.txt + echo "ALL TABLES FROM ALL DATABASES" >> results/Tables_from_databases.txt echo 'select table_schema, table_name from information_schema.tables'| mysql -u$username -p$password >> results/Tables_from_databases.txt echo 'select table_schema, table_name from information_schema.tables'| mysql -u$username -p$password >> results/mysql_tables @@ -57,10 +60,16 @@ echo "SELECT table_schema, table_name FROM information_schema.tables WHERE table echo "Starting of MYSQL Audit" > results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt -echo "Auditing Guidance for section 1.6" >> results/MYSQLAudit.txt -echo "show variables like 'datadir'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "Auditing Guidance for section 3.1" >> results/MYSQLAudit.txt +echo "show variables where variable_name = 'datadir'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo " " >> results/MYSQLAudit.txt +echo "################################" >> results/MYSQLAudit.txt + +echo "Auditing Guidance for section 3.2" >> results/MYSQLAudit.txt +echo "show variables like 'log_bin_basename'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt + echo "Auditing Guidance for section 2.2" >> results/MYSQLAudit.txt echo "show variables like 'basedir'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt @@ -68,17 +77,39 @@ echo " " >> results/MYSQLAudit.txt echo "Logging" >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt -echo "Auditing Guidance for section 3.1" >> results/MYSQLAudit.txt +echo "Auditing Guidance for section 3.3" >> results/MYSQLAudit.txt echo "show variables like 'log_error'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt -echo "Auditing Guidance for section 3.3 & 3.4 " >> results/MYSQLAudit.txt +echo "Auditing Guidance for section 3.3" >> results/MYSQLAudit.txt echo "show variables like 'log_bin'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt -echo "show variables like 'log_bin'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "Auditing Guidance for section 3.4 " >> results/MYSQLAudit.txt +echo "show variables like 'slow_query_log'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "################################" >> results/MYSQLAudit.txt +echo " " >> results/MYSQLAudit.txt + +echo "Auditing Guidance for section 3.5 " >> results/MYSQLAudit.txt +echo "show variables like 'relay_log_basename'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt echo " " >> results/MYSQLAudit.txt + +echo "Auditing Guidance for section 4.9 " >> results/MYSQLAudit.txt +echo "SHOW VARIABLES LIKE 'sql_mode'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "################################" >> results/MYSQLAudit.txt +echo " " >> results/MYSQLAudit.txt + +echo "Auditing Guidance for section 7.5 " >> results/MYSQLAudit.txt +echo "SHOW VARIABLES LIKE 'default_password_lifetime'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "################################" >> results/MYSQLAudit.txt +echo " " >> results/MYSQLAudit.txt + +echo "Auditing Guidance for section 7.6 " >> results/MYSQLAudit.txt +echo "SHOW VARIABLES LIKE 'validate_password%'" | mysql -u$username -p$password >> results/MYSQLAudit.txt +echo "################################" >> results/MYSQLAudit.txt +echo " " >> results/MYSQLAudit.txt + echo "Auditing Guidance for section 4.5" >> results/MYSQLAudit.txt echo "select user from mysql.user where user = 'root'" | mysql -u$username -p$password >> results/MYSQLAudit.txt echo "################################" >> results/MYSQLAudit.txt