Lock down of MySQL

Author Message

Tony Wood

Thursday 15 May 2003 4:47:39 am

Does eZ really need Grant *. privileges?
Could eZ make suggestions for a grant command that gives the eZ database user only what it really needs for production environments.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Gabriel Ambuehl

Friday 16 May 2003 3:29:34 am

No, ezpublish needs no grant privilege. I'd say it doesn't need index or drop database/table (the latter until there's some script to install modules at the very least) either.

Visit http://triligon.org

Tony Wood

Friday 16 May 2003 3:55:11 am

It would be nice to have this in the doco, so you had a basic...

grant all on default.* to default@localhost identified by 'password';

and advanced...

grant x,y,x on default.* to default@localhost identified by 'password';

This would then be updated by eZ if the system changes and need to add tables etc etc.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Gabriel Ambuehl

Friday 30 May 2003 5:07:30 am

I'd say

grant select, insert, delete, update on EZPUBLISHDB.* to YOURUSER identified by 'PW'

should do the job for now.

Visit http://triligon.org

Bård Farstad

Friday 30 May 2003 10:20:03 am

eZ publish also needs to create temporary tables. Under the setup eZ publish needs to be able to drop and create tables.

--bård

Documentation: http://ez.no/doc

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.