Lock down of MySQL

Author Message

Tony Wood

Thursday 15 May 2003 4:47:39 am

Does eZ really need Grant *. privileges?
Could eZ make suggestions for a grant command that gives the eZ database user only what it really needs for production environments.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Gabriel Ambuehl

Friday 16 May 2003 3:29:34 am

No, ezpublish needs no grant privilege. I'd say it doesn't need index or drop database/table (the latter until there's some script to install modules at the very least) either.

Visit http://triligon.org

Tony Wood

Friday 16 May 2003 3:55:11 am

It would be nice to have this in the doco, so you had a basic...

grant all on default.* to default@localhost identified by 'password';

and advanced...

grant x,y,x on default.* to default@localhost identified by 'password';

This would then be updated by eZ if the system changes and need to add tables etc etc.

Tony Wood : twitter.com/tonywood
Vision with Technology
Experts in eZ Publish consulting & development

Power to the Editor!

Free eZ Training : http://www.VisionWT.com/training
eZ Future Podcast : http://www.VisionWT.com/eZ-Future

Gabriel Ambuehl

Friday 30 May 2003 5:07:30 am

I'd say

grant select, insert, delete, update on EZPUBLISHDB.* to YOURUSER identified by 'PW'

should do the job for now.

Visit http://triligon.org

Bård Farstad

Friday 30 May 2003 10:20:03 am

eZ publish also needs to create temporary tables. Under the setup eZ publish needs to be able to drop and create tables.

--bård

Documentation: http://ez.no/doc

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 18 2025 05:17:35
Script start
Timing: Jan 18 2025 05:17:35
Module start 'layout'
Timing: Jan 18 2025 05:17:35
Module start 'content'
Timing: Jan 18 2025 05:17:36
Module end 'content'
Timing: Jan 18 2025 05:17:36
Script end

Main resources:

Total runtime0.4369 sec
Peak memory usage4,096.0000 KB
Database Queries65

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0056 587.8125152.6094
Module start 'layout' 0.00560.0033 740.421939.4141
Module start 'content' 0.00890.4268 779.8359597.6875
Module end 'content' 0.43570.0012 1,377.523412.1875
Script end 0.4368  1,389.7109 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00310.7147160.0002
Check MTime0.00130.2945160.0001
Mysql Total
Database connection0.00070.159610.0007
Mysqli_queries0.388788.9735650.0060
Looping result0.00060.1358630.0000
Template Total0.410493.920.2052
Template load0.00210.492120.0011
Template processing0.408293.447720.2041
Template load and register function0.00010.020410.0001
states
state_id_array0.00090.195010.0009
state_identifier_array0.00060.132120.0003
Override
Cache load0.00180.4194230.0001
Sytem overhead
Fetch class attribute can translate value0.00050.123830.0002
Fetch class attribute name0.00090.203270.0001
XML
Image XML parsing0.00100.235330.0003
class_abstraction
Instantiating content class attribute0.00000.002580.0000
General
dbfile0.00070.1625230.0000
String conversion0.00000.002040.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
3content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
5content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
1content/datatype/view/ezxmltags/line.tpl<No override>design/standard/templates/content/datatype/view/ezxmltags/line.tplEdit templateOverride template
5content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 16
 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs