HEX
Server: nginx/1.16.1
System: Linux ecs-04358622 4.19.90-2107.6.0.0100.oe1.bclinux.x86_64 #1 SMP Wed Dec 1 19:59:44 CST 2021 x86_64
User: nginx (994)
PHP: 8.0.0
Disabled: NONE
Upload Files
File: //usr/local/edr/var/baseline/mysqlcheck.sh
#!/bin/bash

REPAIR_FLAG=$1
if [ ! -f /etc/my.cnf ]
then
	echo "3045#5698#2#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 3 ]
then
	echo "检查是否配置通用查询日志"
	sed -i /general_log_file/d /etc/my.cnf
	echo "general_log_file=/var/lib/mysql/localhost.log" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 4 ]
then
	echo "检查是否禁止mysql以管理员账号权限运行"
	sed -i /user=/d /etc/my.cnf
	echo "user=mysql" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 5 ]
then
	echo "检查是否配置二进制日志"
	sed -i /log_bin/d /etc/my.cnf
	echo "log_bin=mysql-bin" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 6 ]
then
	echo "检查是否根据机器性能和业务需求,设置最大连接数"
	CONNECT_NUM=`cat /etc/my.cnf | grep "max_connections" | grep -v "#" | awk -F '=' '{print $2}'`
	if [ -z $CONNECT_NUM ]
	then
		CONNECT_NUM=0
	fi
	sed -i /max_connections/d /etc/my.cnf
	echo "max_connections=$3" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#$CONNECT_NUM#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 7 ]
then
        echo "检查是否配置更新日志"
	sed -i /relay_log_info_file/d /etc/my.cnf
	echo "relay_log_info_file=relay-log.info" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 8 ]
then
        echo "检查是否配置慢查询日志"
	sed -i /slow_query_log_file/d /etc/my.cnf
	echo "slow_query_log_file=/var/lib/mysql/localhost-slow.log" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 9 ]
then
        echo "检查是否配置错误日志"
	sed -i /log_error/d /etc/my.cnf
	echo "log_error=/var/lib/mysql/localhost.localdomain.err" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
elif [ $2 == 10 ]
then
        echo "检查是否禁止mysql对本地文件存取"
	sed -i /local_infile/d /etc/my.cnf
	echo "local_infile=0" >> /etc/my.cnf
	echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
	sleep 0.5
fi