Which of the following steps should be performed in order to secure a MySQL server freshly installed from a binary tarball.

Question

Options

• AAll initial accounts should have passwords set and unused accounts should be removed.
• BThe MySQL server should be set to run as it's own user, not as an administrative account.
• CThe data directory and it's contents should be strictly accessible only to the user MySQL runs as.
• DThe server should be started with the mysqld_secure script.

• A
  83% (30)
• D
  17% (6)

Explanation

After you've established the proper filesystem access so that the mysql login account owns the relevant directories and files, the MySQL server should be run using this account. This is important because mysql is a regular login account that has no special filesystem privileges. The server should not be run as the system root user. There are many reasons for this; one is that there are operations performed by the server that involve reading or writing files in the server host filesystem. (For example, LOAD DATA INFILE and SELECT ... INTO OUTFILE do so.) Running the server as root is a bad idea because doing so gives it root privileges and vastly increases the extent of the filesystem that the server can access or modify. The initial MySQL accounts have no password by default. You should assign a password immediately to any root accounts to prevent other people from connecting to the server as root and gaining complete control over it. On Unix, MySQL comes with a mysql_secure_installation script that can perform several helpful securityrelated operations on your installation. [Editor Comment: there is no script called Make sure that all MySQL accounts have passwords.

No community discussion yet for this question.