mariadb_securisation
Différences
Ci-dessous, les différences entre deux révisions de la page.
Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
mariadb_securisation [2023/07/05 19:36] – [Suite de la commande] pascal | mariadb_securisation [2023/07/05 19:46] (Version actuelle) – [Mot de passe root] pascal | ||
---|---|---|---|
Ligne 6: | Ligne 6: | ||
Cette commande fait partie des packages mysql-server et mariadb-server. | Cette commande fait partie des packages mysql-server et mariadb-server. | ||
===== Exécution de la commande ===== | ===== Exécution de la commande ===== | ||
- | ==== Mot de passe root ==== | + | ==== Saisie du mot de passe root actuel |
< | < | ||
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB | NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB | ||
Ligne 20: | Ligne 20: | ||
Pas de mot de passe. le user root se connecte via socket sans mot de passe. | Pas de mot de passe. le user root se connecte via socket sans mot de passe. | ||
- | ==== Suite de la commande | + | ==== Définition d'un mot de passe pour root ==== |
< | < | ||
Ligne 30: | Ligne 30: | ||
Switch to unix_socket authentication [Y/n] n | Switch to unix_socket authentication [Y/n] n | ||
... skipping. | ... skipping. | ||
+ | </ | ||
+ | Il ne faut pas définir de mot de passe pour root afin de n' | ||
+ | ==== Définition d'un mot de passe pour root ==== | ||
+ | < | ||
You already have your root account protected, so you can safely answer ' | You already have your root account protected, so you can safely answer ' | ||
Change the root password? [Y/n] n | Change the root password? [Y/n] n | ||
... skipping. | ... skipping. | ||
+ | </ | ||
+ | < | ||
By default, a MariaDB installation has an anonymous user, allowing anyone | By default, a MariaDB installation has an anonymous user, allowing anyone | ||
to log into MariaDB without having to have a user account created for | to log into MariaDB without having to have a user account created for | ||
Ligne 44: | Ligne 48: | ||
Remove anonymous users? [Y/n] Y | Remove anonymous users? [Y/n] Y | ||
... Success! | ... Success! | ||
+ | </ | ||
+ | < | ||
Normally, root should only be allowed to connect from ' | Normally, root should only be allowed to connect from ' | ||
ensures that someone cannot guess at the root password from the network. | ensures that someone cannot guess at the root password from the network. | ||
Ligne 50: | Ligne 55: | ||
Disallow root login remotely? [Y/n] n | Disallow root login remotely? [Y/n] n | ||
... skipping. | ... skipping. | ||
- | |||
- | By default, MariaDB comes with a database named ' | ||
- | access. | ||
- | before moving into a production environment. | ||
- | |||
- | Remove test database and access to it? [Y/n] Y | ||
- | - Dropping test database... | ||
- | ... Success! | ||
- | - Removing privileges on test database... | ||
- | ... Success! | ||
- | |||
- | Reloading the privilege tables will ensure that all changes made so far | ||
- | will take effect immediately. | ||
- | |||
- | Reload privilege tables now? [Y/n] Y | ||
- | ... Success! | ||
- | |||
- | Cleaning up... | ||
- | |||
- | All done! If you've completed all of the above steps, your MariaDB | ||
- | installation should now be secure. | ||
- | |||
</ | </ | ||
==== Suite de la commande ==== | ==== Suite de la commande ==== |
mariadb_securisation.1688585764.txt.gz · Dernière modification : 2023/07/05 19:36 de pascal