Details

This option causes mysqld to start without using the privilege system.

Rationale:

If this option is used, all clients of the affected server will have unrestricted access to all databases.

Solution

Perform the following to establish the recommended state:

Open the MySQL configuration (e.g., my.cnf) file and set:

skip-grant-tables = FALSE

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3477

This security hardening control applies to the following category of controls within NIST 800-53: Access Control, Media Protection.This control applies to the following type of system Unix.

References

• 800-53|AC-3
• 800-53|MP-2
• CSCv7|14.6

Source

• Tenable.com/audits