The following mysqld options affect
networking security:
--secure
IP numbers returned by the
gethostbyname() system call are checked to make sure they resolve back to the
original hostname. This makes it harder for someone on the outside to get
access by pretending to be another host. This option also adds some sanity
checks of hostnames. The option is turned off by default in MySQL Version 3.21
because sometimes it takes a long time to perform backward resolutions. MySQL
Version 3.22 caches hostnames and has this option enabled by default.
--skip-grant-tables
This option causes the server not to
use the privilege system at all. This gives everyone full access to all
databases! (You can tell a running server to start using the grant tables again
by executing mysqladmin flush-privileges or mysqladmin reload.)
--skip-name-resolve
Hostnames are not resolved. All Host
column values in the grant tables must be IP numbers or localhost.
--skip-networking
Don't allow TCP/IP connections over
the network. All connections to mysqld must be made via Unix sockets. This
option is unsuitable for systems that use MIT-pthreads, because the
MIT-pthreads package doesn't support Unix sockets.
--skip-show-database
SHOW DATABASE command doesn't return
anything.
--safe-show-database
SHOW DATABASE only returns databases
for which the user have some kind of privilege.
No comments:
Post a Comment