Details

When created, the MySQL user may have interactive access to the operating system, which means that the MySQL user could login to the host as any other user would.

NOTE : Update MYSQL_USER to the appropriate value for your local environment.

Solution

Perform the following steps to remediate this setting:
– Execute one of the following commands in a terminal
usermod -s /bin/false mysql
usermod -s /sbin/nologin mysql

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1622

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6(7)(b)

Source

• Tenable.com/audits