forked from StoneAtom/StoneDB
49 lines
2.1 KiB
SQL
49 lines
2.1 KiB
SQL
-- Copyright (c) 2012, 2021, Oracle and/or its affiliates.
|
|
--
|
|
-- This program is free software; you can redistribute it and/or modify
|
|
-- it under the terms of the GNU General Public License, version 2.0,
|
|
-- as published by the Free Software Foundation.
|
|
--
|
|
-- This program is also distributed with certain software (including
|
|
-- but not limited to OpenSSL) that is licensed under separate terms,
|
|
-- as designated in a particular file or component or in included license
|
|
-- documentation. The authors of MySQL hereby grant you an additional
|
|
-- permission to link the program and your derivative works with the
|
|
-- separately licensed software that they have included with MySQL.
|
|
--
|
|
-- This program is distributed in the hope that it will be useful,
|
|
-- but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
-- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
-- GNU General Public License, version 2.0, for more details.
|
|
--
|
|
-- You should have received a copy of the GNU General Public License
|
|
-- along with this program; if not, write to the Free Software
|
|
-- Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
|
|
# This set of commands will modify the predefined accounts of a MySQL installation
|
|
# to increase security.
|
|
|
|
# 1) Set passwords for the root account.
|
|
# Note that the password 'ABC123xyz' will be replaced by a random string
|
|
# when these commands are transferred to the server.
|
|
SET @@old_passwords=0;
|
|
UPDATE mysql.user SET Password=PASSWORD('ABC123xyz') WHERE User='root' and plugin in ('', 'mysql_native_password');
|
|
SET @@old_passwords=2;
|
|
UPDATE mysql.user SET authentication_string=PASSWORD('ABC123xyz') WHERE User='root' and plugin='sha256_password';
|
|
|
|
# 2) Drop the anonymous account.
|
|
DELETE FROM mysql.user WHERE User='';
|
|
|
|
# 3) Force the root user to change the password on first connect.
|
|
UPDATE mysql.user SET Password_expired='Y' WHERE User='root';
|
|
|
|
# 4) remove remote accounts
|
|
DELETE FROM mysql.user WHERE Host <> 'localhost';
|
|
|
|
# 5) Drop the test database
|
|
DROP DATABASE IF EXISTS test;
|
|
DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%';
|
|
|
|
# In case this file is sent to a running server.
|
|
FLUSH PRIVILEGES;
|