All Questions

Tagged with
Filter by
Sorted by
Tagged with
1
vote
0answers
72 views

SQL Server Security - Encryption

I have requirement to store the some sensitive information in SQL Server 2016. Organization policy demands, it should be encrypted. Business Requirement: Data cannot be decrypted by DBA. Data cannot ...
2
votes
0answers
52 views

Questions and advice for complying with Federal tax information (FTI) Security Guidelines for Federal, State and Local Agencies per Publication 1075

I've been able to find writings on compliance topics (e.g. HIPAA, SARBANES-OXLEY, PCI DSS) but I haven't found much on FTI (Federal tax information) and Publication 1075 outside of the IRS website ...
2
votes
1answer
84 views

pt-kill - how to securely allow access to mysql server when running as service

I know how to run pt-kill as systemd service: [Unit] Description = pt-kill myUser After=syslog.target mysql.service Requires=mysql.service [Service] Type = simple PIDFile = /var/run/ptkill.pid ...
1
vote
1answer
174 views

how to script out all the permissions in a folder using powershell?

Using the script below I find out where are the data and log folders: declare @rc int, @dir nvarchar(4000) declare @data nvarchar(4000) declare @log nvarchar(4000) ...
3
votes
2answers
213 views

SQL Server 2008 Authentication mode changed on its own

This morning we experienced an issue where our production server seemed to decide to change from Mixed authentication mode to Windows only authentication of its own volition. I was curious to know if ...
1
vote
0answers
2k views

Set secure_file_priv=NULL in MariaDB

In order to secure my server, I'd like to set: secure_file_priv = NULL As per MySQL's docs - http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_secure_file_priv If set to ...
1
vote
2answers
516 views

SQL Server Service Account Configuration - one account per Server? [duplicate]

Planning to re-create new service accounts for our Sql-Servers, I wondered if - from a security perspective - it maybe better to have one domain account per Service and per Server or to create one ...
0
votes
1answer
56 views

Need to deny DML access through SSMS using web app credentials

A user can login to some web application and can submit any application which will affect the data(insert/update) in database, but that specific user should not be able to manipulate the data through ...
1
vote
1answer
1k views

SQL Server Service's Log On As account

I just inherited a set of new servers and whoever set them up left the "Log On As" account as the default "NT Service\MSSQLSERVER". I'd like to change that over to an Active Directory service name. I ...
0
votes
1answer
5k views

Setup mySQL in a chroot in Debian Wheezy

Sounds like a simple question, but the documentation is rare about what mySQL needs to run inside a chroot. I think I'm almost there, but I'm running into a permission problem that I can't solve, and ...
3
votes
2answers
3k views

Changing the SQL Server service account - any additional considerations?

I have inherited a few instances that are running under LocalSystem. I need to change this to a domain account as we are changing our backup strategy to go to a network share and then to tape and I ...
4
votes
2answers
93 views

disallow SET command in a postgresql server

Im planning to publish my postgresql server to a few untrusted clients. I dont want them to modify any runtime setting, like work_mem or something risky to my server. In general I assume the ...
3
votes
2answers
615 views

Can I configure MySQL's typecasting to consider 0 != 'foo'?

This article points out the following security problem with MySQL: USERS id | email | password_reset_token 1 | one@example.com | QTlXww)uV!Hdg3U6aGwKV2FPvAqzVgPx 2 | two@example.com | ...
4
votes
1answer
3k views

Make sure MySQL is not accepting remote connections

I am currently doing development for a LAMP-based website. I do not know what configuration changes have been made to MySQL since it was installed on our server. The way that we use MySQL, there is no ...
1
vote
1answer
879 views

Allow access for localhost and named server

I'm trying to set up a user to allow them access from localhost and from a specific named server. Is this possible in MySQL and if it is how do I do it? I know I can use % under the host to allow ...