Difference between revisions of "Securing mysql with a script"
From MyWiki
Line 11: | Line 11: | ||
y | y | ||
EOF | EOF | ||
+ | |||
+ | </source> | ||
+ | |||
+ | <source lang="sql"> | ||
+ | #!/bin/bash | ||
+ | |||
+ | # Make sure that NOBODY can access the server without a password | ||
+ | mysql -e "UPDATE mysql.user SET Password = PASSWORD('CHANGEME') WHERE User = 'root'" | ||
+ | # Kill the anonymous users | ||
+ | mysql -e "DROP USER ''@'localhost'" | ||
+ | # Because our hostname varies we'll use some Bash magic here. | ||
+ | mysql -e "DROP USER ''@'$(hostname)'" | ||
+ | # Kill off the demo database | ||
+ | mysql -e "DROP DATABASE test" | ||
+ | # Make our changes take effect | ||
+ | mysql -e "FLUSH PRIVILEGES" | ||
+ | # Any subsequent tries to run queries this way will get access denied because lack of usr/pwd param | ||
+ | |||
+ | |||
</source> | </source> |
Revision as of 12:45, 28 August 2017
mysql_secure_installation <<EOF
y
secret
secret
y
y
y
y
EOF
#!/bin/bash # Make sure that NOBODY can access the server WITHOUT a password mysql -e "UPDATE mysql.user SET Password = PASSWORD('CHANGEME') WHERE User = 'root'" # KILL the anonymous users mysql -e "DROP USER ''@'localhost'" # Because our hostname varies we'll use some Bash magic here. mysql -e "DROP USER ''@'$(hostname)'" # Kill off the demo database mysql -e "DROP DATABASE test" # Make our changes take effect mysql -e "FLUSH PRIVILEGES" # Any subsequent tries to run queries this way will get access denied because lack of usr/pwd param