File: //usr/local/edr/var/baseline/mysqlcheck.sh
#!/bin/bash
REPAIR_FLAG=$1
if [ ! -f /etc/my.cnf ]
then
echo "3045#5698#2#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 3 ]
then
echo "检查是否配置通用查询日志"
sed -i /general_log_file/d /etc/my.cnf
echo "general_log_file=/var/lib/mysql/localhost.log" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 4 ]
then
echo "检查是否禁止mysql以管理员账号权限运行"
sed -i /user=/d /etc/my.cnf
echo "user=mysql" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 5 ]
then
echo "检查是否配置二进制日志"
sed -i /log_bin/d /etc/my.cnf
echo "log_bin=mysql-bin" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 6 ]
then
echo "检查是否根据机器性能和业务需求,设置最大连接数"
CONNECT_NUM=`cat /etc/my.cnf | grep "max_connections" | grep -v "#" | awk -F '=' '{print $2}'`
if [ -z $CONNECT_NUM ]
then
CONNECT_NUM=0
fi
sed -i /max_connections/d /etc/my.cnf
echo "max_connections=$3" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#$CONNECT_NUM#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 7 ]
then
echo "检查是否配置更新日志"
sed -i /relay_log_info_file/d /etc/my.cnf
echo "relay_log_info_file=relay-log.info" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 8 ]
then
echo "检查是否配置慢查询日志"
sed -i /slow_query_log_file/d /etc/my.cnf
echo "slow_query_log_file=/var/lib/mysql/localhost-slow.log" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 9 ]
then
echo "检查是否配置错误日志"
sed -i /log_error/d /etc/my.cnf
echo "log_error=/var/lib/mysql/localhost.localdomain.err" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
elif [ $2 == 10 ]
then
echo "检查是否禁止mysql对本地文件存取"
sed -i /local_infile/d /etc/my.cnf
echo "local_infile=0" >> /etc/my.cnf
echo "3045#5697#1#$2#$3#0#" >> /usr/local/edr/var/baseline/mysqlcheck_result
sleep 0.5
fi