3 ms·
Apologies if I ask a stupid question: is it necessary to run the mitigations on a database server?
by exabrial 3y ago
Apologies if I ask a stupid question: is it necessary to run the mitigations on a database server?
- sebazzz 3y agoAnd even better: can we disable the mitigations while still keeping up to date with patches and BIOS updates?
- yencabulator 3y agoIf that database server is a VM (cloud host or on-prem), the host will likely decide to have mitigations on. If the database server gives shell to DBAs or such who don't get root, perhaps yes. If the owners wish to restrict the attack surface of most of the non-database software running on a current day fat linux distro, perhaps yes. No mitigations means buffer overflow in any network-exposed code (DHCP client, DNS resolver, SSH server, Prometheus metrics exporter, ...) could lead to a ransomware attack on the database etc.