Security in MySQL

Table of Contents     [+/-]

Preface and Legal Notice

1. Security

2. General Security Issues     [+/-]

2.1. Security Guidelines

2.2. Password Security in MySQL     [+/-]

2.2.1. Administrator Guidelines for Password Security

2.2.2. End-User Guidelines for Password Security

2.2.3. Password Hashing in MySQL

2.2.4. Implications of Password Hashing Changes in MySQL 4.1 for Application Programs

2.3. Making MySQL Secure Against Attackers

2.4. Security-Related mysqld Options

2.5. How to Run MySQL as a Normal User

2.6. Security Issues with LOAD DATA LOCAL

2.7. Client Programming Security Guidelines

3. Postinstallation Setup and Testing     [+/-]

3.1. Unix Postinstallation Procedures     [+/-]

3.1.1. Problems Running mysql_install_db

3.1.2. Starting and Stopping MySQL Automatically

3.1.3. Starting and Troubleshooting the MySQL Server

3.2. Securing the Initial MySQL Accounts

4. The MySQL Access Privilege System     [+/-]

4.1. Privileges Provided by MySQL

4.2. Privilege System Grant Tables

4.3. Specifying Account Names

4.4. Access Control, Stage 1: Connection Verification

4.5. Access Control, Stage 2: Request Verification

4.6. When Privilege Changes Take Effect

4.7. Causes of Access-Denied Errors

5. MySQL User Account Management     [+/-]

5.1. User Names and Passwords

5.2. Adding User Accounts

5.3. Removing User Accounts

5.4. Setting Account Resource Limits

5.5. Assigning Account Passwords

5.6. Pluggable Authentication     [+/-]

5.6.1. The Native Authentication Plugins

5.6.2. The Clear-Text Client-Side Authentication Plugin

5.6.3. The Socket Peer-Credential Authentication Plugin

5.6.4. The Test Authentication Plugin

5.7. Proxy Users

5.8. Using SSL for Secure Connections     [+/-]

5.8.1. Basic SSL Concepts

5.8.2. Using SSL Connections

5.8.3. SSL Command Options

5.8.4. Setting Up SSL Certificates for MySQL

5.9. Connecting to MySQL Remotely from Windows with SSH

5.10. Auditing MySQL Account Activity

6. Backup and Recovery     [+/-]

6.1. Backup and Recovery Types

6.2. Database Backup Methods

6.3. Example Backup and Recovery Strategy     [+/-]

6.3.1. Establishing a Backup Policy

6.3.2. Using Backups for Recovery

6.3.3. Backup Strategy Summary

6.4. Using mysqldump for Backups     [+/-]

6.4.1. Dumping Data in SQL Format with mysqldump

6.4.2. Reloading SQL-Format Backups

6.4.3. Dumping Data in Delimited-Text Format with mysqldump

6.4.4. Reloading Delimited-Text Format Backups

6.4.5. mysqldump Tips

6.5. Point-in-Time (Incremental) Recovery Using the Binary Log     [+/-]

6.5.1. Point-in-Time Recovery Using Event Times

6.5.2. Point-in-Time Recovery Using Event Positions

6.6. MyISAM Table Maintenance and Crash Recovery     [+/-]

6.6.1. Using myisamchk for Crash Recovery

6.6.2. How to Check MyISAM Tables for Errors

6.6.3. How to Repair MyISAM Tables

6.6.4. MyISAM Table Optimization

6.6.5. Setting Up a MyISAM Table Maintenance Schedule

7. Frequently Asked Questions about Security