安裝完mysql-server ,
通海網(wǎng)站建設(shè)公司創(chuàng)新互聯(lián)建站,通海網(wǎng)站設(shè)計(jì)制作,有大型網(wǎng)站制作公司豐富經(jīng)驗(yàn)。已為通海成百上千提供企業(yè)網(wǎng)站建設(shè)服務(wù)。企業(yè)網(wǎng)站搭建\外貿(mào)網(wǎng)站制作要多少錢,請(qǐng)找那個(gè)售后服務(wù)好的通海做網(wǎng)站的公司定做!
會(huì)提示可以運(yùn)行mysql_secure_installation,運(yùn)行mysql_secure_installation會(huì)執(zhí)行幾個(gè)設(shè)
置:
為root用戶設(shè)置密碼;
刪除匿名賬號(hào);
取消root用戶遠(yuǎn)程登錄;
刪除test庫(kù)和對(duì)test庫(kù)的訪問權(quán)限;
刷新授權(quán)表使修改生效;
通過這幾項(xiàng)的設(shè)置能夠提高mysql庫(kù)的安全,建議生產(chǎn)環(huán)境中mysql安裝這完成后一定要運(yùn)行一
次mysql_secure_installation,詳細(xì)步驟請(qǐng)參看下面的命令;
復(fù)制代碼,代碼如下:
[root@server1 ~]# ;
mysql_secure_installation;
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS ;
RECOMMENDED FOR ALL MySQL;
SERVERS IN PRODUCTION USE PLEASE READ EACH STEP ;
CAREFULLY;
In order to log into MySQL to secure it we'll need the ;
current;
password for the root user If you've just installed MySQL;
and;
you haven't set the root password yet the password will be blank;
so ;
you should just press enter here;
Enter current password for root (enter for none)–初次運(yùn)行直接回車;
OK successfully used ;
password moving on;
Setting the root password ensures that nobody can log ;
into the MySQL;
root user without the proper authorisation;
Set root ;
password?[Y/n] – ;
是否設(shè)置root用戶密碼,輸入y并回車或直接回車;
New password: – 設(shè)置root用戶的密碼;
Re-enter new password: – 再輸入一次你設(shè)置的密碼;
Password updated ;
successfully;
Reloading privilege tables;
Success;
By default a ;
MySQL installation has an anonymous user allowing anyone;
to log into MySQL ;
without having to have a user account created for;
them. This is intended only ;
for testing and to make the installation;
go a bit smoother. You should ;
remove them before moving into a;
production environment;
Remove anonymous ;
users [Y/n] – ;
是否刪除匿名用戶,生產(chǎn)環(huán)境建議刪除,所以直接回車;
Success;
Normally root should only be ;
allowed to connect from ?localhost;
This?ensures that someone cannot guess ;
at the root password from the network;
Disallow root login remotely;
[Y/n] ;
–是否禁止root遠(yuǎn)程登錄,根據(jù)自己的需求選擇Y/n并回車,建議禁止;
By default MySQL ;
comes with a database named 'test' that anyone can;
access This is also ;
intended only for testing, and should be removed;
before moving into a ;
production environment;
Remove test database and access to it [Y/n] – 是否刪除test數(shù)據(jù)庫(kù) 直接回車;
Dropping test ;
database;
Success。
不熟悉mysql,但是oracle,是必須建立用戶后附權(quán)限才可以正常登陸的。跟oracle匿名用戶scott一點(diǎn)關(guān)系沒有。
比如匿名賬號(hào)容易帶來安全隱患,建議刪除,執(zhí)行如下SQL語(yǔ)句即可刪除權(quán)限表中所有的匿名賬號(hào):
mysqldelete from mysql.user where user='';
mysqldelete from mysql.db where user='';
mysqldelete from mysql.tables_priv where user='';
mysqldelete from mysql.columns_priv where user='';
mysqldelete from mysql.procs_priv where user='';
因?yàn)樵谀J(rèn)設(shè)置下,這個(gè)匿名用戶在localhost上幾乎擁有和root一樣的權(quán)限。很可能因?yàn)樵L問者上傳一個(gè)PHP文件,用這個(gè)PHP文件創(chuàng)建一個(gè)新用戶,并給他一個(gè)較高的權(quán)限,然后用這個(gè)新用戶連接到服務(wù)器的MySQL,對(duì)該服務(wù)器的MySQL進(jìn)行管理。刪除命令如下: