Red Hat Bugzilla – Bug 88133
RFE: place #skip-networking in /etc/my.cnf for mysql to avoid security issue
Last modified: 2007-04-18 12:52:48 EDT
Description of problem: ----------------------- Many people run mysql on the same machine as the web server, and thus don't need external networking enabled at ALL. A service that is turned off is always more secure than a service that's turned on. Mysql comes by default with: Proposed solution (for /etc/my.cnf): ------------------------------------ If you'd add a commented-out "skip networking" line in /etc/my.cnf, more people would discover how to turn off networking: [mysqld] datadir=/var/lib/mysql socket=/var/lib/mysql/mysql.sock #skip-networking [mysql.server] user=mysql basedir=/var/lib #skip-networking [safe_mysqld] err-log=/var/log/mysqld.log pid-file=/var/run/mysqld/mysqld.pid #skip-networking
*** Bug 88134 has been marked as a duplicate of this bug. ***
Just marking this as an enhancement for now. We'll take a look at it this week.
After thinking about this for a while, we will not be changing the my.cnf file with the additional requested information. Not that there is never a need to skip networking, it's just that the default from MySQL is not to skip it. There are several other options that a user may wish to enable / disable depending on their situation. We would have to put all equally important switches into my.cnf (commented out). Users should look at the documentation for information on setting up their servers.