問(wèn)題描述：
（1）數(shù)據(jù)庫(kù)系統(tǒng)配置不合規(guī)的密碼長(zhǎng)度及復(fù)雜度策略。
■MySQL數(shù)據(jù)庫(kù)系統(tǒng)未啟用“validate_password”
數(shù)據(jù)庫(kù)系統(tǒng)配置合規(guī)的密碼有效周期策略
■MySQL數(shù)據(jù)庫(kù)配置未合理的“password_lifetime”參數(shù)
整改建議：
（1）建議數(shù)據(jù)庫(kù)啟用validate_password插件，且至少配置以下策略 ■validate_password_length 密碼最小長(zhǎng)度 ■validate_password_mixed_case_count 密碼至少要包含的小寫(xiě)字母?jìng)€(gè)數(shù)和大寫(xiě)字母?jìng)€(gè)數(shù) ■validate_password_number_count 密碼至少要包含的數(shù)字個(gè)數(shù) ■validate_password_special_char_count密碼至少要包含的特殊字符數(shù)；
（2）建議數(shù)據(jù)庫(kù)配置 ‘default_password_lifetime‘; 默認(rèn)密碼有效期不為0（具體有效期視業(yè)務(wù)需求定，一般情況可參考設(shè)為90-180天）。
整改結(jié)果：
MySQL8.0 安裝卸載validate_password插件 和 validate_password組件
安裝卸載 validate_password 組件
在mysql客戶(hù)端執(zhí)行
安裝 validate_password 組件
### 安裝 validate_password 組件
INSTALL COMPONENT 'file://component_validate_password';
卸載 validate_password 組件
### 卸載 validate_password 組件
UNINSTALL COMPONENT 'file://component_validate_password';
validate_password：
安裝validate_password插件：
有些版本較低或未進(jìn)行全部插件安裝的MySQL，會(huì)發(fā)現(xiàn)如下情況：
mysql> SHOW VARIABLES LIKE 'validate_password%';
Empty set (0.00 sec)
沒(méi)看錯(cuò)，未安裝~
那么請(qǐng)執(zhí)行如下命令安裝即可：
mysql> install plugin validate_password soname 'validate_password.so';
Query OK, 0 rows affected (0.17 sec)
卸載命令：
mysql> UNINSTALL PLUGIN validate_password;
Query OK, 0 rows affected, 1 warning (0.01 sec)
安裝后可通過(guò)命令 show plugins 查看已安裝的MySQL插件：狀態(tài)為：ACTIVE表示已激活
mysql> show plugins;
+---------------------------------+----------+--------------------+----------------------+---------+
| Name | Status | Type | Library | License |
+---------------------------------+----------+--------------------+----------------------+---------+
| binlog | ACTIVE | STORAGE ENGINE | NULL | GPL |
| mysql_native_password | ACTIVE | AUTHENTICATION | NULL | GPL |
| sha256_password | ACTIVE | AUTHENTICATION | NULL | GPL |
| caching_sha2_password | ACTIVE | AUTHENTICATION | NULL | GPL |
| sha2_cache_cleaner | ACTIVE | AUDIT | NULL | GPL |
| CSV | ACTIVE | STORAGE ENGINE | NULL | GPL |
| MEMORY | ACTIVE | STORAGE ENGINE | NULL | GPL |
| InnoDB | ACTIVE | STORAGE ENGINE | NULL | GPL |
| INNODB_TRX | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP_RESET | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMPMEM | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMPMEM_RESET | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP_PER_INDEX | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CMP_PER_INDEX_RESET | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_BUFFER_PAGE | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_BUFFER_PAGE_LRU | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_BUFFER_POOL_STATS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_TEMP_TABLE_INFO | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_METRICS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_DEFAULT_STOPWORD | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_DELETED | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_BEING_DELETED | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_CONFIG | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_INDEX_CACHE | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_FT_INDEX_TABLE | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_TABLES | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_TABLESTATS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_INDEXES | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_TABLESPACES | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_COLUMNS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_VIRTUAL | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_CACHED_INDEXES | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_SESSION_TEMP_TABLESPACES | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| INNODB_HOT_ROW_UPDATE_STATS | ACTIVE | INFORMATION SCHEMA | NULL | GPL |
| MyISAM | ACTIVE | STORAGE ENGINE | NULL | GPL |
| MRG_MYISAM | ACTIVE | STORAGE ENGINE | NULL | GPL |
| PERFORMANCE_SCHEMA | ACTIVE | STORAGE ENGINE | NULL | GPL |
| TempTable | ACTIVE | STORAGE ENGINE | NULL | GPL |
| ARCHIVE | ACTIVE | STORAGE ENGINE | NULL | GPL |
| BLACKHOLE | ACTIVE | STORAGE ENGINE | NULL | GPL |
| FEDERATED | DISABLED | STORAGE ENGINE | NULL | GPL |
| ngram | ACTIVE | FTPARSER | NULL | GPL |
| mysqlx_cache_cleaner | ACTIVE | AUDIT | NULL | GPL |
| mysqlx | ACTIVE | DAEMON | NULL | GPL |
| AUDIT_CDB | ACTIVE | AUDIT | audit_cdb.so | GPL |
| rpl_semi_sync_master | ACTIVE | REPLICATION | semisync_master.so | GPL |
| rpl_semi_sync_slave | ACTIVE | REPLICATION | semisync_slave.so | GPL |
| validate_password | ACTIVE | VALIDATE PASSWORD | validate_password.so | GPL |
+---------------------------------+----------+--------------------+----------------------+---------+
49 rows in set (0.00 sec)
參考：
https://blog.51cto.com/u_13677412/3673749
https://blog.csdn.net/kfepiza/article/details/126913185
http://www.itdecent.cn/p/f17ee1b09526
