Correction : vm_hosted : rule_mysql_configure : sécurise.

[lhc/ateliers.git] / etc / mysql / my.cnf

diff --git a/etc/mysql/my.cnf b/etc/mysql/my.cnf
index 8fa1de4..fb1b3cb 100644 (file)
--- a/etc/mysql/my.cnf
+++ b/etc/mysql/my.cnf
@@ -1,51 +1,62 @@
 [client]
-port           = 3306
-socket         = /run/mysqld/sock/mysql
+local-infile = 0
+port = 3306
+socket = /run/mysqld/sock/mysql
 [mysqld_safe]
-nice           = 0
-socket         = /run/mysqld/sock/mysql
+nice = 0
+socket = /run/mysqld/sock/mysql
 [mysqld]
 # chroot = /var/lib/mysql/
 # ssl-ca=/etc/mysql/cacert.pem
 # ssl-cert=/etc/mysql/server-cert.pem
 # ssl-key=/etc/mysql/server-key.pem
-basedir                = /usr
-bind-address           = 127.0.0.1
-#binlog_do_db          = include_database_name
-#binlog_ignore_db      = include_database_name
-datadir                = /home/mysql
-expire_logs_days       = 10
-#general_log             = 1
-#general_log_file        = /var/log/mysql/mysql.log
-key_buffer             = 16M
-lc-messages-dir        = /usr/share/mysql
-#log-queries-not-using-indexes
-#log_bin                       = /var/log/mysql/mysql-bin.log
-#log_slow_queries      = /var/log/mysql/mysql-slow.log
-#long_query_time = 2
-max_allowed_packet     = 16M
-max_binlog_size         = 100M
-#max_connections        = 100
-myisam-recover         = BACKUP
-#pid-file      = /run/mysqld/pid/mysql
-port           = 3306
-query_cache_limit      = 1M
-query_cache_size        = 16M
-#server-id             = 1
+basedir = /usr
+bind-address = 127.0.0.1
+# binlog_do_db = include_database_name
+# binlog_ignore_db = include_database_name
+datadir = /home/mysql
+expire_logs_days = 10
+# general_log = 1
+# general_log_file = /var/log/mysql/mysql.log
+key_buffer = 16M
+lc-messages-dir = /usr/share/mysql
+local-infile = 0
+ # NOTE: disable the use of the "LOAD DATA LOCAL INFILE" command,
+ # which will help to prevent unauthorized reading from local files.
+ # This is especially important when new SQL injection vulnerabilities
+ # in PHP applications are found.
+# log-queries-not-using-indexes
+# log_bin = /var/log/mysql/mysql-bin.log
+# log_slow_queries = /var/log/mysql/mysql-slow.log
+# long_query_time = 2
+max_allowed_packet = 16M
+max_binlog_size = 100M
+# max_connections = 100
+myisam-recover = BACKUP
+# pid-file = /run/mysqld.pid
+plugin-load = auth_socket=auth_socket.so
+port = 3306
+query_cache_limit = 1M
+query_cache_size = 16M
+# server-id = 1
 skip-external-locking
-#socket                = /run/mysqld/sock/mysql
-#table_cache            = 64
-thread_cache_size       = 8
-#thread_concurrency     = 10
-thread_stack           = 192K
-tmpdir         = /tmp
-user           = mysql
+skip-networking
+skip-show-database
+# socket = /run/mysqld/sock/mysql
+# table_cache = 64
+thread_cache_size = 8
+# thread_concurrency = 10
+thread_stack = 192K
+tmpdir = /tmp
+user = mysql
 [mysqldump]
-max_allowed_packet     = 16M
+max_allowed_packet = 16M
 quick
 quote-names
 [mysql]
-#no-auto-rehash        # faster start of mysql but no tab completition
+# no-auto-rehash # NOTE: faster start of mysql but no tab completition
 [isamchk]
-key_buffer             = 16M
+key_buffer = 16M
 !includedir /etc/mysql/conf.d/
+
+# vim: ft=conf