1. Home
  2. Security Hardening
  3. CIS MYSL 5.6Enterprise Linux OS L1 V1.1.0
  4. Verify That ‘MYSQL_PWD’ Is Not Set In Users’ Profiles – .bash_profile

Verify That ‘MYSQL_PWD’ Is Not Set In Users’ Profiles – .bash_profile

Details

MySQL can read a default database password from an environment variable called MYSQL_PWD.

Solution

Check which users and/or scripts are setting MYSQL_PWD and change them to use a more secure method.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles