75 lines
4.2 KiB
Plaintext
75 lines
4.2 KiB
Plaintext
call mtr.add_suppression("Event 'MYSQL_AUDIT_AUTHENTICATION_CREDENTIAL_CHANGE' cannot be aborted.");
|
|
call mtr.add_suppression("Event 'MYSQL_AUDIT_AUTHENTICATION_AUTHID_RENAME' cannot be aborted.");
|
|
call mtr.add_suppression("Event 'MYSQL_AUDIT_AUTHENTICATION_AUTHID_DROP' cannot be aborted.");
|
|
call mtr.add_suppression("Event 'MYSQL_AUDIT_AUTHENTICATION_FLUSH' cannot be aborted.");
|
|
INSTALL PLUGIN null_audit SONAME 'adt_null.so';
|
|
###################################################
|
|
## MYSQL_AUDIT_AUTHENTICATION_CREDENTIAL_CHANGE ##
|
|
###################################################
|
|
CREATE USER testuser@localhost IDENTIFIED BY 'testpwd';
|
|
PREPARE stmt FROM 'ALTER USER testuser@localhost IDENTIFIED BY \'NewPass\'';
|
|
SET @@null_audit_event_order_check = 'MYSQL_AUDIT_COMMAND_START;command_id="3";;'
|
|
'MYSQL_AUDIT_PARSE_PREPARSE;;;'
|
|
'MYSQL_AUDIT_PARSE_POSTPARSE;;;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="100";;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="134";;'
|
|
'MYSQL_AUDIT_AUTHENTICATION_CREDENTIAL_CHANGE;;ABORT_RET';
|
|
EXECUTE stmt;
|
|
SELECT @@null_audit_event_order_check;
|
|
@@null_audit_event_order_check
|
|
EVENT-ORDER-ABORT
|
|
##############################################
|
|
## MYSQL_AUDIT_AUTHENTICATION_AUTHID_RENAME ##
|
|
##############################################
|
|
PREPARE stmt FROM 'RENAME USER testuser@localhost TO newuser@localhost';
|
|
SET @@null_audit_event_order_check = 'MYSQL_AUDIT_COMMAND_START;command_id="3";;'
|
|
'MYSQL_AUDIT_PARSE_PREPARSE;;;'
|
|
'MYSQL_AUDIT_PARSE_POSTPARSE;;;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="100";;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="86";;'
|
|
'MYSQL_AUDIT_AUTHENTICATION_AUTHID_RENAME;;ABORT_RET';
|
|
EXECUTE stmt;
|
|
SELECT @@null_audit_event_order_check;
|
|
@@null_audit_event_order_check
|
|
EVENT-ORDER-ABORT
|
|
############################################
|
|
## MYSQL_AUDIT_AUTHENTICATION_AUTHID_DROP ##
|
|
############################################
|
|
PREPARE stmt FROM 'DROP USER newuser@localhost';
|
|
SET @@null_audit_event_order_check = 'MYSQL_AUDIT_COMMAND_START;command_id="3";;'
|
|
'MYSQL_AUDIT_PARSE_PREPARSE;;;'
|
|
'MYSQL_AUDIT_PARSE_POSTPARSE;;;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="100";;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="85";;'
|
|
'MYSQL_AUDIT_AUTHENTICATION_AUTHID_DROP;;ABORT_RET';
|
|
EXECUTE stmt;
|
|
SELECT @@null_audit_event_order_check;
|
|
@@null_audit_event_order_check
|
|
EVENT-ORDER-ABORT
|
|
######################################
|
|
## MYSQL_AUDIT_AUTHENTICATION_FLUSH ##
|
|
######################################
|
|
PREPARE stmt FROM 'FLUSH PRIVILEGES';
|
|
SET @@null_audit_event_order_check = 'MYSQL_AUDIT_COMMAND_START;command_id="3";;'
|
|
'MYSQL_AUDIT_PARSE_PREPARSE;;;'
|
|
'MYSQL_AUDIT_PARSE_POSTPARSE;;;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="100";;'
|
|
'MYSQL_AUDIT_GENERAL_LOG;;;'
|
|
'MYSQL_AUDIT_QUERY_START;sql_command_id="49";;'
|
|
'MYSQL_AUDIT_AUTHENTICATION_FLUSH;;ABORT_RET';
|
|
EXECUTE stmt;
|
|
SELECT @@null_audit_event_order_check;
|
|
@@null_audit_event_order_check
|
|
EVENT-ORDER-ABORT
|
|
DROP PREPARE stmt;
|
|
UNINSTALL PLUGIN null_audit;
|
|
Warnings:
|
|
Warning 1620 Plugin is busy and will be uninstalled on shutdown
|