1. Home
  2. Security Hardening
  3. CIS MySQL 5.7 Linux OS L1 V1.0.0
  4. Ensure Passwords Are Not Stored in the Global Configuration – /etc/my.cnf

Ensure Passwords Are Not Stored in the Global Configuration – /etc/my.cnf

Details

The [client] section of the MySQL configuration file allows setting a user and password to be used. Verify the password option is not used in the global configuration file (my.cnf).

Solution

Use the mysql_config_editor to store authentication credentials in .mylogin.cnf in encrypted form. If not possible, use the user-specific options file, .my.cnf., and restricting file access permissions to the user identity.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles