Details

Utilizing a least privilege account for MySQL to execute as may reduce the impact of a MySQL-born vulnerability. A restricted account will be unable to access resources unrelated to MySQL, such as operating system configurations.

Solution

Create a user which is only used for running MySQL and directly related processes. This user must not have administrative rights to the system.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1619

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6

Source

• Tenable.com/audits