trellix-enterprise / mysql-audit

AUDIT Plugin for MySQL. See wiki and readme for description. If you find the plugin useful, please star us on GitHub. We love stars and it's a great way to show your feedback.
Other
239 stars 57 forks source link

mysql 5.7.29 dosen't support? #219

Open mookseven opened 4 years ago

mookseven commented 4 years ago

hi My environment is MySQL comunity 5.7.29 on ubuntu18 x86_64,when i install this plugin, i got an error in mysql error log:

[Warning] option 'audit-json-file-bufsize': signed value 0 adjusted to 1 [Warning] option 'plugin-audit-json-file-bufsize': signed value 0 adjusted to 1 [ERROR] Plugin 'AUDIT' init function returned error. [ERROR] Plugin 'AUDIT' registration as a AUDIT failed.

i'm trying to extract offset , but didn't extract offset key ( https://github.com/mcafee/mysql-audit/wiki/Troubleshooting)

let me know mysql 5.7.29 x86_64 offset ?????

anybody know?

or please help me step by step way to extract offset key

thank you in advance

offset guide : (i failed to extract offset) Offsets on Debian distributions: On Debian (and Ubuntu) distributions debug symbols are not shipped with the mysql server distribution. There is need to compile from source in order to extract the offsets. Example steps for compiling from source with debug symbols:

Download source code by running: apt-get source mysql-server -> apt source mysql-server-5.9.29 Extract source: dpkg-source -x mysql-.dsc ->dpkg-source -x mysql-5.9.29.dsc didn't work!!!!!!!!!!! Change into extract dir: mysql- Modify debian/rules file to add "-g" flag to CFLAGS and CXXFLAGS passed to cmake. Example diff of modifications:

jery-jang commented 4 years ago

audit_offsets= 7824, 7872, 3632, 4792, 456, 360, 0, 32, 64, 160, 536, 7988, 4360, 3648, 3656, 3660, 6072, 2072, 8, 7056, 7096, 7080, 13472, 148, 672