McAfee M4050 Troubleshooting Guide - Page 17

Secure MySQL remote access, Remove individual users’ remote access, Remove ALL remote access

Get McAfee M4050 - Network Security Platform PDF manuals and user guides
UPC - 731944582832
View all McAfee M4050 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 17 highlights

McAfee® Network Security Platform 6.0 Hardening the Manager Server for Windows 2003 Start MySQL. mysql> use mysql; Back up the user table to user_backup before changing it. mysql> create table user_backup as select * from user; Validate that the backup table was mysql> select count(*) from created and row count matches that user_backup; of the mysql.db table. List all users and hosts. mysql> select user,host from user; Remove anonymous/blank accounts. mysql> delete from user where user=""; Validate that rows with blank user mysql> select user,host from columns have been removed. user; Secure MySQL remote access This section provides two options for removing remote access.  Remove individual users' remote access  Remove ALL remote access (Recommended) Remove individual users' remote access Do ONE of the following:  Remove admin (Network Security Platform user) remote access mysql> delete from user where host!='localhost' and user='admin'; (The admin user cannot login remotely; however Manager root can. Use second cmd window to validate.) mysql>flush privileges;  Remove root remote access (Recommended minimum action) mysql> delete from user where host!='localhost' and user='root'; This ensures that the root user cannot login remotely; however Manager user can log in remotely. Use second cmd window to validate. mysql>flush privileges; Remove ALL remote access mysql> delete from user where host!='localhost' ALL user access is disabled including Manager users from remote host(s). Use another cmd window to validate; you can ONLY log in to the MySQL CLI on the Manager server by qualifying username, password and db. For example: mysql uadmin -pXXX lf 8

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
McAfee® Network Security Platform 6.0
Hardening the Manager Server for Windows 2003
8
Start MySQL.
mysql> use mysql;
Back up the user table to
user_backup before changing it.
mysql> create table user_backup
as select * from user;
Validate that the backup table was
created and row count matches that
of the mysql.db table.
mysql> select count(*) from
user_backup;
List all users and hosts.
mysql> select user,host from
user;
Remove anonymous/blank
accounts.
mysql> delete from user where
user="";
Validate that rows with blank user
columns have been removed.
mysql> select user,host from
user;
Secure MySQL remote access
This section provides two options for removing remote access.
Remove individual users’ remote access
Remove ALL remote access (Recommended)
Remove individual users’ remote access
Do ONE of the following:
Remove admin (Network Security Platform user) remote access
mysql> delete from user where host!='localhost' and
user='admin';
(The admin user cannot login remotely; however Manager root can. Use second cmd
window to validate.)
mysql>flush privileges;
Remove root remote access (Recommended minimum action)
mysql> delete from user where host!='localhost' and
user='root';
This ensures that the root user cannot login remotely; however Manager user can log
in remotely. Use second cmd window to validate.
mysql>flush privileges;
Remove ALL remote access
mysql> delete from user where host!='localhost'
ALL user access is disabled including Manager users from remote host(s).
Use another cmd window to validate; you can ONLY log in to the MySQL CLI on the
Manager server by qualifying username, password and db. For example:
mysql -
uadmin -pXXX lf