[Security] Add secure install and slow query log support#592
Open
tousefanjrmc-ci wants to merge 1 commit intogeerlingguy:masterfrom
Open
[Security] Add secure install and slow query log support#592tousefanjrmc-ci wants to merge 1 commit intogeerlingguy:masterfrom
tousefanjrmc-ci wants to merge 1 commit intogeerlingguy:masterfrom
Conversation
Author
|
安全加固:在此 PR 中通过 secure-install.yml 执行删除匿名用户、禁用远程 root 登录、删除 test 数据库,并刷新权限,确保基础安全合规。 |
Author
|
慢查询日志:新增 slow-query-log.yml,动态生成 /etc/mysql/conf.d/slow-query.cnf,默认 long_query_time 为 2 秒,可通过变量覆盖,并确保日志目录和权限正确。 |
Author
|
安全加固:已实现禁用远程 root 登录、删除匿名用户、移除 test 数据库等基础安全加固措施。 |
Author
|
慢查询日志:新增 slow-query-log.yml,根据变量生成 /etc/mysql/conf.d/slow-query.cnf,默认 long_query_time 为 2 秒,可通过 mysql_slow_query_time 覆盖。 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR enhances MySQL security hardening and introduces slow query log auditing for the role.
Security hardening items:
Slow query log configuration logic:
Compatibility notes:
Implementation details:
All new/updated YAML files pass basic yamllint (indentation and spacing).