[mysql数据库的安全途径提升部署方案.docxVIP

部署方案Mysql数据库所处环境的设置：1）、修改root用户口令，删除空口令# /usr/local/mysql/bin/mysqladmin -u root password “upassword” //使用mysqladmin#mysql use mysql; #mysql update user set password=password(upassword) where user=root; #mysql flush privileges; //强制刷新内存授权表，否则用的还是在内存缓冲的口令2）、删除默认数据库和数据库用户#mysql show databases; #mysql drop?/category/database \o databasedatabase?test; //删除数据库test#use mysql; #delete from db; //删除存放数据库的表信息，因为还没有数据库信息。#mysql delete from user where not (user=root) ; // 删除初始非root的用户#mysql delete from user where user=root and password=; //删除空密码的root，尽量重复操作Query OK, 2 rows affected (0.00 sec) #mysql flush privileges; //强制刷新内存授权表。3）、改变默认mysql管理员帐号mysql update user set user=newroot where user=root; //改成不易被猜测的用户名mysql flush privileges;4）、关于密码的管理#mysql insert into users values (1,password(1234),test);5）、使用独立用户运行msyql#vim /etc/f [mysqld] user=mysql6）、禁止远程连接数据库# vim /etc/my.cf将#skip-networking注释去掉。# /usr/local/mysql/bin/mysqladmin -u root -p shutdown //停止数据库#/usr/local/mysql/bin/mysqld_safe --user=mysql //后台用mysql用户启动mysql7）、限制连接用户的数量#vim /etc/f [mysqld] max_user_connections 28）、用户目录权限限制# chown -R root? /usr/local/mysql/? //mysql主目录给root# chown -R mysql.mysql /usr/local/mysql/var //确保数据库目录权限所属mysql用户9）、命令历史记录保护# rm .bash_history .mysql_history //删除历史记录# ln -s /dev/null .bash_history //将shell记录文件置空# ln -s /dev/null .mysql_history //将mysql记录文件置空10）、禁止MySQL对本地文件存取# vi sqlfile.txt1,sszng,1112,sman,222#mysql load data local infile sqlfile.txt into table users fields terminated by ,; //读入数据#mysql select * from users;+--------+------------+----------+| userid | username?? | password |+--------+------------+----------+|????? 1 | sszng | 111?? ||????? 2 | sman | 222 |+--------+------------+----------+可以在f中添加local-infile=0，或者加参数local-infile=0启动mysql。#/usr/local/mysql/bin/mysqld_safe --user=mysql --local-infile=0 #mysql load data local infile sqlfile.txt into table users fields terminated by ,;#ERROR 1148 (42000): The used command is not allowed with this MySQL version--local-infile=0选项启动mysq