Securing MySQL

Here is my quick secure guide for MySQL: Rename root user account mysql -u root -p use mysql; update user set user=”mydbadmin” where user=”root”; flush privileges; Set the root password for database mysqladmin -u mydbadmin password ‘the-new-password’ Drop default test database mysql -u mydbadmin -p drop database test; quit; Edit the MySQL server config vi /etc/my.cnf and under [mysqld] skip-networking <– Disables network access set-variable=local-infile=0 <– prevent against unauthorized reading from local files bind-address=127.0.0.1 restart mysql /etc/init.d/mysqld restart

December 31, 2008 · 1 min · Nick