用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-cassandra311-3-1命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | cis-cassandra311-3.1 |
| description | Ensure the cassandra and superuser roles are separate |
| category | cis-cassandra |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","cassandra","access-control","roles","privileges"] |
| cis_id | 3.1 |
| cis_benchmark | CIS Apache Cassandra 3.11 Benchmark v1.1.0 |
| tech_stack |
| ["cassandra"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
The default installation of Cassandra includes a superuser role named cassandra. This necessitates the creation of a separate role to be the superuser role.
Superuser permissions allow for the creation, deletion, and permission management of other users. Considering the cassandra role is well known it should not be a superuser or one which is used for any administrative tasks.
The separate account must be created, assigned the superuser role, and tested for correct functionality prior to removing the superuser role from the cassandra account. Otherwise,
To verify the configuration, run the following query:
select role, is_superuser from system_auth.roles;
If cassandra or any unapproved role is returned, this is a finding.
To remediate a misconfiguration, perform the following steps:
Note: Replace <NEW_ROLE_HERE> with the desired role and <NEW_PASSWORD_HERE> with a password.
UPDATE system_auth.roles SET is_superuser=null WHERE role='cassandra'
The cassandra role is created with superuser privileges by default.
Not specified in the benchmark.