MYSQL Privilege & Security

Security Manager

1. empty password or weak password: use random password instead;

2. text password: union management

3. privilege distribution: min privilege distribution

4. account management: use different privilege for different account

5. history operation: delete the operation history: cat /dev/null > ~/.mysql_history

Mandatory Access Control (MAC): mysql system control the access

Discretionary Access Control (DAC): client use username/password to login database

Install MAC

1. Create system table: define the table privilege of user;

2. Modify the user authentication logic (sql_acl.cc)

Security Audit

Audit user operation; Audit operation context

Check user privileges

mysql>show grants for <username>@'127.0.0.1';