{"resources":{"mysqldb":{"id":"mysqldb","name":"mysqldb","fields":{"component":{"name":"component","type":"\u001bmysqldb.component","title":"MySQL component","desc":"An installed server component (mysql.component), for example component_validate_password or a keyring component. Components are the modern replacement for several plugins.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"instance":{"name":"instance","type":"\u001bmysqldb.instance","title":"MySQL server","desc":"A single MySQL, MariaDB, or Percona server, reported by `flavor`. Exposes version metadata and, through `variables`, every global configuration parameter (the source for most hardening checks). The most security-relevant settings are surfaced directly (`ssl`, `requireSecureTransport`, `tlsVersion`, `sqlMode`, `secureFilePriv`, `localInfile`, `bindAddress`). Principals and objects are reachable through `users`, `schemas`, `plugins`, `components`, and `replicationChannels`.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"plugin":{"name":"plugin","type":"\u001bmysqldb.plugin","title":"MySQL plugin","desc":"An installed plugin (information_schema.PLUGINS), for example an authentication, audit, or connection-control plugin. `status` reports whether it is active.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"privilege":{"name":"privilege","type":"\u001bmysqldb.privilege","title":"MySQL privilege grant","desc":"A single privilege granted to an account, expanded from information_schema. `scope` is the level it applies at (GLOBAL, SCHEMA, TABLE, or ROUTINE), `schema` and `table` name the object where relevant, and `isGrantable` reports whether the grantee may grant it onward (GRANT OPTION).","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"replicationChannel":{"name":"replicationChannel","type":"\u001bmysqldb.replicationChannel","title":"MySQL replication channel","desc":"A replication source connection (performance_schema.replication_connection_configuration). `sslAllowed` and `sslVerifyServerCert` report whether the channel secures and verifies its connection to the source.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"routine":{"name":"routine","type":"\u001bmysqldb.routine","title":"MySQL stored routine","desc":"A stored procedure or function (information_schema.ROUTINES). `securityType` reports whether the routine runs as its `definer` (DEFINER) or the caller (INVOKER); a DEFINER routine owned by a privileged account is a privilege-escalation surface.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"schema":{"name":"schema","type":"\u001bmysqldb.schema","title":"MySQL schema","desc":"A schema (database) on the server, selected by `name`. Exposes the default character set and collation, the privileges granted on it, and the routines and tables it contains.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"table":{"name":"table","type":"\u001bmysqldb.table","title":"MySQL table","desc":"A table or view in a schema (information_schema.TABLES). Exposes the storage engine and row format, whether the tablespace is encrypted, and the privileges granted on the table.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"user":{"name":"user","type":"\u001bmysqldb.user","title":"MySQL account","desc":"A MySQL account, identified by the `user` name and the `host` it may connect from. Exposes the authentication plugin, credential and lock state (`hasPassword`, `accountLocked`, `passwordExpired`, `passwordLifetime`), TLS requirements (`sslType`), and connection limits. `isAnonymous` and `isWildcardHost` flag the accounts hardening guides call out. `privileges` lists the grants held and `grantedRoles` the roles the account is granted.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true},"variable":{"name":"variable","type":"\u001bmysqldb.variable","title":"MySQL configuration variable","desc":"A global configuration variable, selected by `name`, for example `mysqldb.instance.variables.where(name == \"local_infile\")`.","provider":"go.mondoo.com/mql/v13/providers/mysqldb","is_implicit_resource":true}},"title":"MySQL","desc":"Root namespace for all MySQL, MariaDB, and Percona server resources. Query `mysqldb.instance` for the connected server: its configuration variables, users, privileges, schemas, routines, plugins, components, and replication state.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.component":{"id":"mysqldb.component","name":"mysqldb.component","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Component name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"urn":{"name":"urn","type":"\u0007","is_mandatory":true,"title":"Component URN, for example file://component_validate_password","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL component","desc":"An installed server component (mysql.component), for example component_validate_password or a keyring component. Components are the modern replacement for several plugins.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.instance":{"id":"mysqldb.instance","name":"mysqldb.instance","fields":{"bindAddress":{"name":"bindAddress","type":"\u0007","is_mandatory":true,"title":"Address the server binds to (bind_address)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"components":{"name":"components","type":"\u0019\u001bmysqldb.component","title":"Installed server components (mysql.component)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"flavor":{"name":"flavor","type":"\u0007","is_mandatory":true,"title":"Detected flavor: mysql, mariadb, or percona","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"localInfile":{"name":"localInfile","type":"\u0004","is_mandatory":true,"title":"Whether local_infile is enabled","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"plugins":{"name":"plugins","type":"\u0019\u001bmysqldb.plugin","title":"Installed plugins (information_schema.PLUGINS)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"replicationChannels":{"name":"replicationChannels","type":"\u0019\u001bmysqldb.replicationChannel","title":"Replication source connections configured on the server","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"requireSecureTransport":{"name":"requireSecureTransport","type":"\u0004","is_mandatory":true,"title":"Whether the server requires encrypted connections (require_secure_transport)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"schemas":{"name":"schemas","type":"\u0019\u001bmysqldb.schema","title":"Schemas (databases) on the server","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"secureFilePriv":{"name":"secureFilePriv","type":"\u0007","is_mandatory":true,"title":"Value of the secure_file_priv variable","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"serverUuid":{"name":"serverUuid","type":"\u0007","is_mandatory":true,"title":"Server UUID, or empty when the server does not expose one","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"sqlMode":{"name":"sqlMode","type":"\u0007","is_mandatory":true,"title":"Value of the sql_mode variable","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"ssl":{"name":"ssl","type":"\u0004","is_mandatory":true,"title":"Whether TLS is available (have_ssl = YES)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"tlsVersion":{"name":"tlsVersion","type":"\u0007","is_mandatory":true,"title":"Accepted TLS protocol versions (tls_version)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"users":{"name":"users","type":"\u0019\u001bmysqldb.user","title":"Accounts defined on the server","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"variables":{"name":"variables","type":"\u0019\u001bmysqldb.variable","title":"Global configuration variables (SHOW GLOBAL VARIABLES)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Full server version, for example 8.0.40","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"versionComment":{"name":"versionComment","type":"\u0007","is_mandatory":true,"title":"Server version comment (distribution string)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL server","desc":"A single MySQL, MariaDB, or Percona server, reported by `flavor`. Exposes version metadata and, through `variables`, every global configuration parameter (the source for most hardening checks). The most security-relevant settings are surfaced directly (`ssl`, `requireSecureTransport`, `tlsVersion`, `sqlMode`, `secureFilePriv`, `localInfile`, `bindAddress`). Principals and objects are reachable through `users`, `schemas`, `plugins`, `components`, and `replicationChannels`.","min_provider_version":"13.0.0","defaults":"version flavor","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.plugin":{"id":"mysqldb.plugin","name":"mysqldb.plugin","fields":{"library":{"name":"library","type":"\u0007","is_mandatory":true,"title":"Shared library the plugin is loaded from, or empty when built in","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"Plugin license","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plugin name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Load status, for example ACTIVE or DISABLED","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Plugin type, for example AUTHENTICATION or AUDIT","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL plugin","desc":"An installed plugin (information_schema.PLUGINS), for example an authentication, audit, or connection-control plugin. `status` reports whether it is active.","min_provider_version":"13.0.0","defaults":"name status","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.privilege":{"id":"mysqldb.privilege","name":"mysqldb.privilege","fields":{"grantee":{"name":"grantee","type":"\u0007","is_mandatory":true,"title":"Account the privilege is granted to, as user@host","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"isGrantable":{"name":"isGrantable","type":"\u0004","is_mandatory":true,"title":"Whether the grantee may grant the privilege to others","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"privilegeType":{"name":"privilegeType","type":"\u0007","is_mandatory":true,"title":"Privilege type, for example SUPER, FILE, GRANT OPTION, or SELECT","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the privilege applies to, when scoped below GLOBAL","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope: GLOBAL, SCHEMA, TABLE, or ROUTINE","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"table":{"name":"table","type":"\u0007","is_mandatory":true,"title":"Table the privilege applies to, when scoped to TABLE","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL privilege grant","desc":"A single privilege granted to an account, expanded from information_schema. `scope` is the level it applies at (GLOBAL, SCHEMA, TABLE, or ROUTINE), `schema` and `table` name the object where relevant, and `isGrantable` reports whether the grantee may grant it onward (GRANT OPTION).","min_provider_version":"13.0.0","defaults":"privilegeType scope","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.replicationChannel":{"id":"mysqldb.replicationChannel","name":"mysqldb.replicationChannel","fields":{"channel":{"name":"channel","type":"\u0007","is_mandatory":true,"title":"Replication channel name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"sourceHost":{"name":"sourceHost","type":"\u0007","is_mandatory":true,"title":"Host of the replication source","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"sslAllowed":{"name":"sslAllowed","type":"\u0004","is_mandatory":true,"title":"Whether TLS is allowed for the channel","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"sslVerifyServerCert":{"name":"sslVerifyServerCert","type":"\u0004","is_mandatory":true,"title":"Whether the channel verifies the source server certificate","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL replication channel","desc":"A replication source connection (performance_schema.replication_connection_configuration). `sslAllowed` and `sslVerifyServerCert` report whether the channel secures and verifies its connection to the source.","min_provider_version":"13.0.0","defaults":"channel","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.routine":{"id":"mysqldb.routine","name":"mysqldb.routine","fields":{"definer":{"name":"definer","type":"\u0007","is_mandatory":true,"title":"Account the routine executes as, when securityType is DEFINER (user@host)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"isDeterministic":{"name":"isDeterministic","type":"\u0004","is_mandatory":true,"title":"Whether the routine is declared deterministic","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Routine name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the routine belongs to","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"securityType":{"name":"securityType","type":"\u0007","is_mandatory":true,"title":"Security context the routine runs in: DEFINER or INVOKER","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Routine type: PROCEDURE or FUNCTION","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL stored routine","desc":"A stored procedure or function (information_schema.ROUTINES). `securityType` reports whether the routine runs as its `definer` (DEFINER) or the caller (INVOKER); a DEFINER routine owned by a privileged account is a privilege-escalation surface.","min_provider_version":"13.0.0","defaults":"schema name type","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.schema":{"id":"mysqldb.schema","name":"mysqldb.schema","fields":{"defaultCharacterSet":{"name":"defaultCharacterSet","type":"\u0007","is_mandatory":true,"title":"Default character set","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"defaultCollation":{"name":"defaultCollation","type":"\u0007","is_mandatory":true,"title":"Default collation","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Schema name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"privileges":{"name":"privileges","type":"\u0019\u001bmysqldb.privilege","title":"Privileges granted at this schema","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"routines":{"name":"routines","type":"\u0019\u001bmysqldb.routine","title":"Stored procedures and functions in the schema","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"tables":{"name":"tables","type":"\u0019\u001bmysqldb.table","title":"Tables and views in the schema","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL schema","desc":"A schema (database) on the server, selected by `name`. Exposes the default character set and collation, the privileges granted on it, and the routines and tables it contains.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.table":{"id":"mysqldb.table","name":"mysqldb.table","fields":{"encrypted":{"name":"encrypted","type":"\u0004","is_mandatory":true,"title":"Whether the table's tablespace is encrypted","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"engine":{"name":"engine","type":"\u0007","is_mandatory":true,"title":"Storage engine, for example InnoDB","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"privileges":{"name":"privileges","type":"\u0019\u001bmysqldb.privilege","title":"Privileges granted on the table","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"rowFormat":{"name":"rowFormat","type":"\u0007","is_mandatory":true,"title":"Row format, for example Dynamic","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"schema":{"name":"schema","type":"\u0007","is_mandatory":true,"title":"Schema the table belongs to","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL table","desc":"A table or view in a schema (information_schema.TABLES). Exposes the storage engine and row format, whether the tablespace is encrypted, and the privileges granted on the table.","min_provider_version":"13.0.0","defaults":"schema name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.user":{"id":"mysqldb.user","name":"mysqldb.user","fields":{"accountLocked":{"name":"accountLocked","type":"\u0004","is_mandatory":true,"title":"Whether the account is locked","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"authPlugin":{"name":"authPlugin","type":"\u0007","is_mandatory":true,"title":"Authentication plugin, for example caching_sha2_password","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"grantedRoles":{"name":"grantedRoles","type":"\u0019\u001bmysqldb.user","title":"Roles granted to this account","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"hasPassword":{"name":"hasPassword","type":"\u0004","is_mandatory":true,"title":"Whether the account has a password set","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"host":{"name":"host","type":"\u0007","is_mandatory":true,"title":"Host pattern the account may connect from","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"isAnonymous":{"name":"isAnonymous","type":"\u0004","is_mandatory":true,"title":"Whether the account is anonymous (empty user name)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"isWildcardHost":{"name":"isWildcardHost","type":"\u0004","is_mandatory":true,"title":"Whether the account host is a wildcard (%)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"maxConnections":{"name":"maxConnections","type":"\u0005","is_mandatory":true,"title":"Maximum concurrent connections for the account, or 0 for the server default","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"maxUserConnections":{"name":"maxUserConnections","type":"\u0005","is_mandatory":true,"title":"Maximum concurrent user connections, or 0 for the server default","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"passwordExpired":{"name":"passwordExpired","type":"\u0004","is_mandatory":true,"title":"Whether the account password is expired","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"passwordLastChanged":{"name":"passwordLastChanged","type":"\t","is_mandatory":true,"title":"When the password was last changed","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"passwordLifetime":{"name":"passwordLifetime","type":"\u0005","is_mandatory":true,"title":"Days before the password must be changed, or -1 when unset (use default)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"privileges":{"name":"privileges","type":"\u0019\u001bmysqldb.privilege","title":"Privileges held by this account","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"sslType":{"name":"sslType","type":"\u0007","is_mandatory":true,"title":"TLS requirement for the account: empty, ANY, X509, or SPECIFIED","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"Account user name (empty for an anonymous account)","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL account","desc":"A MySQL account, identified by the `user` name and the `host` it may connect from. Exposes the authentication plugin, credential and lock state (`hasPassword`, `accountLocked`, `passwordExpired`, `passwordLifetime`), TLS requirements (`sslType`), and connection limits. `isAnonymous` and `isWildcardHost` flag the accounts hardening guides call out. `privileges` lists the grants held and `grantedRoles` the roles the account is granted.","min_provider_version":"13.0.0","defaults":"user host","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"mysqldb.variable":{"id":"mysqldb.variable","name":"mysqldb.variable","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/mql/v13/providers/mysqldb"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Current value","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}},"title":"MySQL configuration variable","desc":"A global configuration variable, selected by `name`, for example `mysqldb.instance.variables.where(name == \"local_infile\")`.","min_provider_version":"13.0.0","defaults":"name value","provider":"go.mondoo.com/mql/v13/providers/mysqldb"}}}