Description of problem:
-----------------------
Many people run mysql on the same machine as the web server, and thus don't need
external networking enabled at ALL.  A service that is turned off is always more
secure than a service that's turned on.

Mysql comes by default with:
   * no root pasword
   * external network enabled
   * a variety of default accounts


Proposed solution (for /etc/my.cnf):
------------------------------------
If you'd add a commented-out "skip networking" line in /etc/my.cnf, more people
would discover how to turn off networking:  

[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
#skip-networking

[mysql.server]
user=mysql
basedir=/var/lib
#skip-networking

[safe_mysqld]
err-log=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
#skip-networking