'Security' Tag

• MySQL security tasks easily solved with common_schema

  January 17, 2013

  Here are three security tasks I handled, which I'm happy to say were easily solved with common_schema's views and routines (with no prior planning). Two are so easy, that I actually now integrated them into common_schema 1.3: Duplicate a user (create new user with same privileges as another's) Find users with identical set of grants [...]

  posted in MySQL by shlomi

• common_schema: 1.3: security goodies, parameterized split(), json-to-xml, query checksum

  January 14, 2013

  common_schema 1.3 is released and is available for download. New and noteworthy in this version: Parameterized split(): take further control over huge transactions by breaking them down into smaller chunks, now manually tunable if needed duplicate_grantee(): copy+paste existing accounts along with their full set of privileges similar_grants: find which accounts share the exact same set [...]

  posted in MySQL by shlomi

• common_schema 1.2: security, partition management, processes, QueryScript goodies

  November 13, 2012

  common_schema 1.2 is released! This version comes shortly after 1.1, yet contains quite a few interesting goodies: Account blocking Security audit RANGE partition management Slave status Better blocking and idle transaction management QueryScript goodies: echo, report while-otherwise statement; foreach-otherwise statement Better variable scope handling Complete support for variable expansion Transaction support within QueryScript More summary [...]

  posted in MySQL by shlomi

• common_schema rev. 68: eval(), processlist_grantees, candidate_keys, easter_day()

  September 6, 2011

  Revision 68 of common_schema is out, and includes some interesting features: eval(): Evaluates the queries generated by a given query match_grantee(): Match an existing account based on user+host processlist_grantees: Assigning of GRANTEEs for connected processes candidate_keys: Listing of prioritized candidate keys: keys which are UNIQUE, by order of best-use. easter_day(): Returns DATE of easter day [...]

  posted in MySQL by shlomi

• Finding CURRENT_USER for any user

  August 9, 2011

  A MySQL account is a user/host combination. A MySQL connection is done by a user connecting from some host. However, the user/host from which the connection is made are not the same as the user/host as specified in the account. For example, the account may be created thus: CREATE USER 'temp'@'10.0.0.%' IDENTIFIED BY '123456'; The [...]

  posted in MySQL by shlomi

• Announcing common_schema: common views & routines for MySQL

  July 13, 2011

  Today I have released common_schema, a utility schema for MySQL which includes many views and functions, and is aimed to be installed on any MySQL server. What does it do? There are views answering for all sorts of useful information: stuff related to schema analysis, data dimensions, monitoring, processes & transactions, security, internals... There are [...]

  posted in MySQL by shlomi

• ROUTINE_PRIVILEGES implementation

  June 22, 2011

  Following up on MySQL security: inconsistencies, and on MySQL bug #61596, I was thinking it may take a long time till the non-existent ROUTINE_PRIVILEGES view is implemented. Here's my own implementation of the view. I've followed the somewhat strange conventions used in the *_PRIVILEGES tables in INFORMATION_SCHEMA, where the IS_GRANTABLE is a separate column, although [...]

  posted in MySQL by shlomi

• MySQL security: inconsistencies

  June 22, 2011

  Doing some work with MySQL security, I've noticed a few inconsistencies. They're mostly not-too-terrible for daily work, except they get in my way right now. The ALL PRIVILEGES inconsistency The preferred way of assigning account privileges in MySQL is by way of using GRANT. With GRANT, one assigns one or more privileges to an account, [...]

  posted in MySQL by shlomi

• Pop quiz: what is the most basic privilege an account can be assigned with?

  June 14, 2011

  I asked this during my presentation on the MySQL Conference this year. And I got a unanimous answer from the crowd. Take a moment to think this over, before coming up with the answer. Meanwhile, an intermezzo. Tam dam dam... Pom pom Pom pom Pom pom... If your answer is that the most basic privilege [...]

  posted in MySQL by shlomi

• Recovering a MySQL `root` password: the fourth solution

  March 22, 2011

  Have just read Darren Cassar's Recovering a MySQL `root` password – Three solutions. There's a fourth solution: using an init-file, which leads to just one restart of the database instead of two. It also avoids the security issue involved with using skip-grant-tables. I've written all about it before on Dangers of skip-grant-tables. Darren's 1st advice [...]

  posted in MySQL by shlomi