mysql安全基线检查

import mysql.connector

def check_mysql_security(host, user, password):
    try:
        conn = mysql.connector.connect(host=host, user=user, password=password)
        cursor = conn.cursor()
        
        # 检查SSL配置
        cursor.execute("SHOW VARIABLES LIKE 'have_ssl'")
        ssl_status = cursor.fetchone()[1]
        if ssl_status != 'YES':
            print("SSL is not enabled. Please enable SSL for secure connections.")
        
        # 检查用户权限
        cursor.execute("SELECT User, Host FROM mysql.user")
        users = cursor.fetchall()
        for user in users:
            if user[0] == '' or user[1] == '%':
                print(f"Insecure user found: {user[0]}@{user[1]}. Please restrict user permissions.")
        
        # 检查日志记录
        cursor.execute("SHOW VARIABLES LIKE 'log_error'")
        log_error_status = cursor.fetchone()[1]
        if log_error_status != 'ON':
            print("Error logging is not enabled. Please enable error logging for auditing.")
        
        cursor.close()
        conn.close()
    except mysql.connector.Error as err:
        print(f"Error: {err}")

# 示例调用
check_mysql_security('localhost', 'root', 'password')