github
/
mysql-audit
mirror of https://github.com/mcafee-enterprise/mysql-audit
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Updated Configuration (markdown)

master
guylichtman 2012-08-14 01:58:22 -07:00
parent 7a1e22f05c
commit 709d2a84b5
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Configuration.md

@ -9,6 +9,9 @@ Available AUDIT Plugin system varaibles:
* **audit_json_socket**: json UNIX socket Enable|Disable. * **audit_json_socket**: json UNIX socket Enable|Disable.
* **audit_uninstall_plugin**: AUDIT uninstall plugin Enable|Disable (command line/conf file only). If disabled attempts to uninstall the AUDIT plugin via the sql UNINSTALL command will fail. Provides added security from uninstalling the plugin. Also protection from [CVE-2010-1621](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1621) affecting versions up to 5.1.46. * **audit_uninstall_plugin**: AUDIT uninstall plugin Enable|Disable (command line/conf file only). If disabled attempts to uninstall the AUDIT plugin via the sql UNINSTALL command will fail. Provides added security from uninstalling the plugin. Also protection from [CVE-2010-1621](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1621) affecting versions up to 5.1.46.
* **audit_validate_checksum**: mysqld binary checksum validation Enable|Disable. See Troubleshooting section in [[Installation]] page. * **audit_validate_checksum**: mysqld binary checksum validation Enable|Disable. See Troubleshooting section in [[Installation]] page.
* **audit_checksum**: Checksum for mysqld to validate. Used when audit_offsets are present. The plugin will not load if the specified checksum doesn't match the calculated one. This is useful when offsets have been set manually and you want to avoid using the manual offsets without validation after an upgrade of mysqld.
* **audit_record_cmds**: Comma separated list of commands to log to the audit trail. For example: `insert,update,delete`.
* **audit_record_objs**: Comma separated list of objects (tables) to log to the audit trail. Table name should be specified as: `database.table`. Wild cards are supported and it is possible to specify: `*.mytable` or `mydb.*`.
**Note:** The above list may be incomplete. To view all available AUDIT system variables run: **Note:** The above list may be incomplete. To view all available AUDIT system variables run: