1.数据库加固
1.1 禁用mysql历史命令
Rm ~/.mysql_history；
1.2 相关安全设置；
mysqlsecureinstallation
1.3 使用validate_password.so插件，进行安全加固；
1.4 重命名 ROOT 账户；
Update user set user=”新用户名”where user=”root”
1.5 控制最高权限只有管理员
SELECT user, host FROM mysql.user WHERE (Select_priv = 'Y') OR (Insert_priv = 'Y') OR (Update_priv = 'Y') OR (Delete_priv = 'Y') OR (Create_priv = 'Y') OR (Drop_priv = 'Y');SELECT user, host FROM mysql.db WHERE db = 'mysql' AND ((Select_priv = 'Y') OR (Insert_priv = 'Y') OR (Update_priv = 'Y')OR (Delete_priv = 'Y') OR (Create_priv = 'Y') OR (Drop_priv = 'Y'));
1.6 删除默认test数据库，测试帐号，空密码、匿名帐号：
bash drop database if exists ${dbname};bash drop user ''select user,host from mysql.user
1.7 关闭Old_Passwords：
show variables like ‘%password%’；
1.8 确保所有用户都要求使用非空密码登录：
SELECT User,host FROM mysql.user WHERE (plugin IN('mysql_native_password', 'mysql_old_password') AND (LENGTH(Password)= 0 OR Password IS NULL)) OR (plugin='sha256_password' AND LENGTH(authentication_string) = 0);
1.9 禁止MySQL对本地文件存取
Less /etc/my.cnf。
