Paweł Domański
30 lines
1.2 KiB
SQL
30 lines
1.2 KiB
SQL
#--------------------------------------------
|
|
# Permissions for MySQL Database Assessments
|
|
#--------------------------------------------
|
|
|
|
# 158.151.178.88 - This is the Imperva Production appliance that performs vulnerability and compliance scans
|
|
|
|
# Create imperva user to perform vulnerability and complaince scans
|
|
|
|
CREATE USER IF NOT EXISTS 'z-impvuser'@'158.151.178.88' IDENTIFIED BY 'KAl7FCzMNgIoPwAI';
|
|
|
|
# The following object permissions are required:
|
|
|
|
# The reason granting a select privilege on all tables in all databases is the behavior of the INFORMATION_SCHEMA.
|
|
# INFORMATION_SCHEMA provides access to database metadata. Each MySQL user has the right to access these tables,
|
|
# but can see only the rows in the tables that correspond to objects for which the user has the proper access privileges.
|
|
|
|
# For MySQL version 8, the following object permissions are required:
|
|
|
|
GRANT PROCESS, SELECT, SHOW DATABASES, SHOW VIEW ON *.* TO 'z-impvuser'@'158.151.178.88';
|
|
|
|
# Note: There is only one test that requires use of this permissions. It checks usage of encryption for
|
|
# tables and tablespaces as any sensitive data must be encrypted. Otherwise it is subject to
|
|
# compromise and unauthorized disclosure.
|
|
|
|
FLUSH PRIVILEGES;
|
|
|
|
|
|
|
|
//inform Imperva
|
|
email to AwadhwalK@DNB.com |