McAfee M4050 Troubleshooting Guide - Page 16

Remove test database, Remove local anonymous users, the MYSQL and Network Security

Page 16 highlights

McAfee® Network Security Platform 6.0 Hardening the Manager Server for Windows 2003 Remove test database Remove the 'test" database from the server. 1. Start My SQL. mysql> use mysql; 2. Backup db table to do dbbackup before changing it. mysql> create table db_backup as select * from db; 3. Validate that the backup table mysql> select count(*) from was created and row count db_backup; matches that of the mysql.db table. 4. Check all the databases on the mysql> show databases; Manager server. 5. Remove the test db, Keep only the MYSQL and Network Security Platform (for example, lf) databases. mysql> drop database test; 6. You should see only two databases (MYSQL and LF) if you are using the default Network Security Platform installation of MySQL. mysql> show databases; Remove local anonymous users To remove local anonymous users: 1. Look for blank entries for user. mysql> select host,db,user from db; 2. Remove anonymous access to databases mysql> update db set host="localhost" where user=""; 3. Remove anonymous/blank accounts mysql> flush privileges; 4. Validate that "localhost" replaced % entry under the host column. You will also notice you will now need to qualify username and password on the local machine to get into mysql shell from the mysql.exe CLI. Remove remote anonymous users To remove remote anonymous users, you harden mysql.exe CLI access by forcing the requirement for a username and password to get into the mysql shell as follows. 7

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95

McAfee® Network Security Platform 6.0
Hardening the Manager Server for Windows 2003
7
Remove test database
Remove the ‘test” database from the server.
1. Start My SQL.
mysql> use mysql;
2. Backup
db table to do
dbbackup before changing it.
mysql> create table db_backup as
select * from db;
3. Validate that the backup table
was created and row count
matches that of the mysql.db table.
mysql> select count(*) from
db_backup;
4. Check all the databases on the
Manager server.
mysql> show databases;
5. Remove the test db, Keep only
the MYSQL and Network Security
Platform (for example, lf)
databases.
mysql> drop database test;
6. You should see only two
databases (MYSQL and LF) if you
are using the default Network
Security Platform installation of
MySQL.
mysql> show databases;
Remove local anonymous users
To remove local anonymous users:
1. Look for blank entries for user.
mysql> select host,db,user from db;
2. Remove anonymous access to databases
mysql> update db set
host="localhost" where user="";
3. Remove anonymous/blank accounts
mysql> flush privileges;
4. Validate that “localhost” replaced % entry
under the host column. You will also notice
you will now need to qualify username and
password on the local machine to get into
mysql shell from the mysql.exe CLI.
Remove remote anonymous users
To remove remote anonymous users, you harden mysql.exe CLI access by forcing the
requirement for a username and password to get into the mysql shell as follows.