$
sudo /usr/local/mysql/bin/mysql_fix_privilege_tables \ --user=root \ --password=the_mysql_root_passwordDon’t worry if you see warnings about duplicate column names. Once you’ve
completed upgrading the tables, stop the server.
Configuring Access to the MySQL ServerBy default, there is no password set for the MySQL server. You must set a root password as soon as possible. The MySQL AB Windows installer automatically prompts you to set one as part of the configuration process.
For other cases, make sure you follow our installation instructions to set a root password.
A MySQL client connects to a server differently depending on where the server is running. When the client and server are on the same Linux or Mac OS X system, a local connection is made
through a Unix socket file, typically
/tmp/mysql.sock or
/var/lib/mysql/mysql.sock.
On a Windows system, the connection is made through the
MYSQL
named pipe if the server was started with the enable-named-pipe option.
In other cases,
clients send their requests through a TCP/IP network connection. Using a named pipe can actually be slower than using TCP/IP.
If you intend for your server to be accessed only from the host it is running on, you can disable network access to the server by starting the server with the skip-networking option.
Fora server running on Windows, remember to enable the enable-named- pipe option at the same time otherwise you won’t be able to connect to the server.
If you carryout the steps outlined in this chapter, the filesystem access permissions for the MySQL data directory and the server logs should be configured correctly. Keep in mind that users need access to the socket file to connect to the server if the socket file is in the data directory (sometimes the case when using Linux distribution RPMs), take care that users can’t access other files in that directory. We discussed permission settings in Restricting access to files and directories at the beginning of this chapter. Of course, securing the database server is only a small part of overall system security.
If you’re
running Linux or Mac OS X, you can use the
mysql_secure_installation script from the MySQL bin directory to walk interactively through steps to improve
these- curity of your server bin/mysql_secure_installationChange the root password [Y/n]
nRemove anonymous users [Y/n]
yDisallow root login remotely [Y/n]
yRemove test database and access to it [Y/n]
nShare with your friends: