Details

When created, the MySQL user may have interactive access to the operating system, which means that the MySQL user could login to the host as any other user would.

Solution

Perform the following steps to remediate this setting:
– Execute one of the following commands in a terminal
usermod -s /bin/false
usermod -s /sbin/nologin

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1617

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-6

Source

• Tenable.com/audits