Disable MySQL Command History

Details

On Linux/UNIX, the MySQL client logs statements executed interactively to a history file. By default, this file is named .mysql_history in the user’s home directory. Most interactive commands run in the MySQL client application are saved to a history file. The MySQL command history should be disabled.

NOTE : Nessus has not performed this query, and this check is only provided for informational purposes.

Solution

Perform the following steps to remediate this setting:
1. Remove .mysql_history if it exists.
2. Use either of the techniques below to prevent it from being created again:
1. Set the MYSQL_HISTFILE environment variable to /dev/null. This will need to be placed in the shell’s startup script.
2. Create $HOME/.mysql_history as a symbolic to /dev/null.
> ln -s /dev/null $HOME/.mysql_history

Supportive Information

The following resource is also helpful.

This control applies to the following type of system Windows.

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles