Security

我会带着你远行 2022-09-20 15:16 132阅读 0赞

本文转载自：http://dev.mysql.com/doc/refman/5.5/en/security.html

# Security #

**Table of Contents**     \[[\+/-][-]\]

[6.1 General Security Issues][]      \[[\+/-][-]\]

[6.1.1 Security Guidelines][] [6.1.2 Keeping Passwords Secure][] [6.1.3 Making MySQL Secure Against Attackers][] [6.1.4 Security-Related **mysqld** Options and Variables][6.1.4 Security-Related _mysqld_ Options and Variables] [6.1.5 How to Run MySQL as a Normal User][] [6.1.6 Security Issues with `LOAD DATA LOCAL`][6.1.6 Security Issues with _LOAD DATA LOCAL] [6.1.7 Client Programming Security Guidelines][]

[6.2 The MySQL Access Privilege System][]      \[[\+/-][-]\]

[6.2.1 Privileges Provided by MySQL][] [6.2.2 Privilege System Grant Tables][] [6.2.3 Specifying Account Names][] [6.2.4 Access Control, Stage 1: Connection Verification][6.2.4 Access Control_ Stage 1_ Connection Verification] [6.2.5 Access Control, Stage 2: Request Verification][6.2.5 Access Control_ Stage 2_ Request Verification] [6.2.6 When Privilege Changes Take Effect][] [6.2.7 Causes of Access-Denied Errors][]

[6.3 MySQL User Account Management][]      \[[\+/-][-]\]

[6.3.1 User Names and Passwords][] [6.3.2 Adding User Accounts][] [6.3.3 Removing User Accounts][] [6.3.4 Setting Account Resource Limits][] [6.3.5 Assigning Account Passwords][] [6.3.6 Pluggable Authentication][] [6.3.7 Authentication Plugins Available in MySQL][] [6.3.8 Proxy Users][] [6.3.9 Using SSL for Secure Connections][] [6.3.10 Connecting to MySQL Remotely from Windows with SSH][] [6.3.11 MySQL Enterprise Audit Log Plugin][] [6.3.12 SQL-Based MySQL Account Activity Auditing][]

When thinking about security within a MySQL installation, you should consider a wide range of possible topics and how they affect the security of your MySQL server and related applications:

*  General factors that affect security. These include choosing good passwords, not granting unnecessary privileges to users, ensuring application security by preventing SQL injections and data corruption, and others. See [ Section 6.1, “General Security Issues”][6.1 General Security Issues].
 *  Security of the installation itself. The data files, log files, and the all the application files of your installation should be protected to ensure that they are not readable or writable by unauthorized parties. For more information, see [ Section 2.10, “Postinstallation Setup and Testing”][Section_2.10_ _Postinstallation Setup and Testing].
 *  Access control and security within the database system itself, including the users and databases granted with access to the databases, views and stored programs in use within the database. For more information, see [ Section 6.2, “The MySQL Access Privilege System”][6.2 The MySQL Access Privilege System], and [ Section 6.3, “MySQL User Account Management”][6.3 MySQL User Account Management].
 *  Network security of MySQL and your system. The security is related to the grants for individual users, but you may also wish to restrict MySQL so that it is available only locally on the MySQL server host, or to a limited set of other hosts.
 *  Ensure that you have adequate and appropriate backups of your database files, configuration and log files. Also be sure that you have a recovery solution in place and test that you are able to successfully recover the information from your backups. See [ Chapter 7, *Backup and Recovery*][Chapter_7_ _Backup and Recovery].

注：近期参加MySQL运维学习，老师推荐该文章作为学习和技术提高的扩展阅读，先记录到自己的博客中，随后慢慢消化、学习、提高。本文章与“字符集和权限安全”主题相关。

[-]: http://dev.mysql.com/doc/refman/5.5/en/security.html#
[6.1 General Security Issues]: http://dev.mysql.com/doc/refman/5.5/en/general-security-issues.html
[6.1.1 Security Guidelines]: http://dev.mysql.com/doc/refman/5.5/en/security-guidelines.html
[6.1.2 Keeping Passwords Secure]: http://dev.mysql.com/doc/refman/5.5/en/password-security.html
[6.1.3 Making MySQL Secure Against Attackers]: http://dev.mysql.com/doc/refman/5.5/en/security-against-attack.html
[6.1.4 Security-Related _mysqld_ Options and Variables]: http://dev.mysql.com/doc/refman/5.5/en/security-options.html
[6.1.5 How to Run MySQL as a Normal User]: http://dev.mysql.com/doc/refman/5.5/en/changing-mysql-user.html
[6.1.6 Security Issues with _LOAD DATA LOCAL]: http://dev.mysql.com/doc/refman/5.5/en/load-data-local.html
[6.1.7 Client Programming Security Guidelines]: http://dev.mysql.com/doc/refman/5.5/en/secure-client-programming.html
[6.2 The MySQL Access Privilege System]: http://dev.mysql.com/doc/refman/5.5/en/privilege-system.html
[6.2.1 Privileges Provided by MySQL]: http://dev.mysql.com/doc/refman/5.5/en/privileges-provided.html
[6.2.2 Privilege System Grant Tables]: http://dev.mysql.com/doc/refman/5.5/en/grant-table-structure.html
[6.2.3 Specifying Account Names]: http://dev.mysql.com/doc/refman/5.5/en/account-names.html
[6.2.4 Access Control_ Stage 1_ Connection Verification]: http://dev.mysql.com/doc/refman/5.5/en/connection-access.html
[6.2.5 Access Control_ Stage 2_ Request Verification]: http://dev.mysql.com/doc/refman/5.5/en/request-access.html
[6.2.6 When Privilege Changes Take Effect]: http://dev.mysql.com/doc/refman/5.5/en/privilege-changes.html
[6.2.7 Causes of Access-Denied Errors]: http://dev.mysql.com/doc/refman/5.5/en/access-denied.html
[6.3 MySQL User Account Management]: http://dev.mysql.com/doc/refman/5.5/en/user-account-management.html
[6.3.1 User Names and Passwords]: http://dev.mysql.com/doc/refman/5.5/en/user-names.html
[6.3.2 Adding User Accounts]: http://dev.mysql.com/doc/refman/5.5/en/adding-users.html
[6.3.3 Removing User Accounts]: http://dev.mysql.com/doc/refman/5.5/en/removing-users.html
[6.3.4 Setting Account Resource Limits]: http://dev.mysql.com/doc/refman/5.5/en/user-resources.html
[6.3.5 Assigning Account Passwords]: http://dev.mysql.com/doc/refman/5.5/en/assigning-passwords.html
[6.3.6 Pluggable Authentication]: http://dev.mysql.com/doc/refman/5.5/en/pluggable-authentication.html
[6.3.7 Authentication Plugins Available in MySQL]: http://dev.mysql.com/doc/refman/5.5/en/authentication-plugins-available.html
[6.3.8 Proxy Users]: http://dev.mysql.com/doc/refman/5.5/en/proxy-users.html
[6.3.9 Using SSL for Secure Connections]: http://dev.mysql.com/doc/refman/5.5/en/ssl-connections.html
[6.3.10 Connecting to MySQL Remotely from Windows with SSH]: http://dev.mysql.com/doc/refman/5.5/en/windows-and-ssh.html
[6.3.11 MySQL Enterprise Audit Log Plugin]: http://dev.mysql.com/doc/refman/5.5/en/audit-log-plugin.html
[6.3.12 SQL-Based MySQL Account Activity Auditing]: http://dev.mysql.com/doc/refman/5.5/en/account-activity-auditing.html
[Section_2.10_ _Postinstallation Setup and Testing]: http://dev.mysql.com/doc/refman/5.5/en/postinstallation.html
[Chapter_7_ _Backup and Recovery]: http://dev.mysql.com/doc/refman/5.5/en/backup-and-recovery.html