database/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-07-27 18:02:13 +03:00
Code Activity

MDEV-17456 Malicious SUPER user can possibly change audit log configuration without leaving traces.

Browse Source 
The 'SET server_audit_logging ' statements should be logged no matter
what.
This commit is contained in:
Alexey Botchkov
2019-04-29 01:25:17 +04:00
parent cd26cdcd97
commit a529188e05
3 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
mysql-test/suite/plugins/t/server_audit.test
View File

@ -136,6 +136,9 @@ select * from t1;
select 2;
drop table t1;
set global server_audit_logging= off;
set global server_audit_logging= on;
set global server_audit_events='';
set global server_audit_query_log_limit= 15;