<div id="docs-body">
 <div class="chapter">
  <div class="titlepage">
   <div>
    <div>
     <h1 class="title">
      <a name="security">
      </a>
      Chapter 8 Security
     </h1>
    </div>
   </div>
  </div>
  <div class="toc">
   <p>
    <b>
     Table of Contents
    </b>
   </p>
   <dl class="toc">
    <dt>
     <span class="section">
      <a href="general-security-issues.html">
       8.1 General Security Issues
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="security-guidelines.html">
         8.1.1 Security Guidelines
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="password-security.html">
         8.1.2 Keeping Passwords Secure
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="security-against-attack.html">
         8.1.3 Making MySQL Secure Against Attackers
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="security-options.html">
         8.1.4 Security-Related mysqld Options and Variables
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="changing-mysql-user.html">
         8.1.5 How to Run MySQL as a Normal User
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="load-data-local-security.html">
         8.1.6 Security Considerations for LOAD DATA LOCAL
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="secure-client-programming.html">
         8.1.7 Client Programming Security Guidelines
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="access-control.html">
       8.2 Access Control and Account Management
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="user-names.html">
         8.2.1 Account User Names and Passwords
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="privileges-provided.html">
         8.2.2 Privileges Provided by MySQL
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="grant-tables.html">
         8.2.3 Grant Tables
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="account-names.html">
         8.2.4 Specifying Account Names
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="role-names.html">
         8.2.5 Specifying Role Names
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="connection-access.html">
         8.2.6 Access Control, Stage 1: Connection Verification
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="request-access.html">
         8.2.7 Access Control, Stage 2: Request Verification
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="creating-accounts.html">
         8.2.8 Adding Accounts, Assigning Privileges, and Dropping Accounts
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="reserved-accounts.html">
         8.2.9 Reserved Accounts
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="roles.html">
         8.2.10 Using Roles
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="account-categories.html">
         8.2.11 Account Categories
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="partial-revokes.html">
         8.2.12 Privilege Restriction Using Partial Revokes
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="privilege-changes.html">
         8.2.13 When Privilege Changes Take Effect
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="assigning-passwords.html">
         8.2.14 Assigning Account Passwords
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="password-management.html">
         8.2.15 Password Management
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="expired-password-handling.html">
         8.2.16 Server Handling of Expired Passwords
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="pluggable-authentication.html">
         8.2.17 Pluggable Authentication
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="multifactor-authentication.html">
         8.2.18 Multifactor Authentication
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="proxy-users.html">
         8.2.19 Proxy Users
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="account-locking.html">
         8.2.20 Account Locking
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="user-resources.html">
         8.2.21 Setting Account Resource Limits
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="problems-connecting.html">
         8.2.22 Troubleshooting Problems Connecting to MySQL
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="account-activity-auditing.html">
         8.2.23 SQL-Based Account Activity Auditing
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="encrypted-connections.html">
       8.3 Using Encrypted Connections
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="using-encrypted-connections.html">
         8.3.1 Configuring MySQL to Use Encrypted Connections
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="encrypted-connection-protocols-ciphers.html">
         8.3.2 Encrypted Connection TLS Protocols and Ciphers
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="creating-ssl-rsa-files.html">
         8.3.3 Creating SSL and RSA Certificates and Keys
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="windows-and-ssh.html">
         8.3.4 Connecting to MySQL Remotely from Windows with SSH
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="reusing-ssl-sessions.html">
         8.3.5 Reusing SSL Sessions
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="security-plugins.html">
       8.4 Security Components and Plugins
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="authentication-plugins.html">
         8.4.1 Authentication Plugins
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="connection-control.html">
         8.4.2 The Connection-Control Plugins
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="validate-password.html">
         8.4.3 The Password Validation Component
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="keyring.html">
         8.4.4 The MySQL Keyring
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="audit-log.html">
         8.4.5 MySQL Enterprise Audit
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="audit-api-message-emit.html">
         8.4.6 The Audit Message Component
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="firewall.html">
         8.4.7 MySQL Enterprise Firewall
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="data-masking.html">
       8.5 MySQL Enterprise Data Masking and De-Identification
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="data-masking-components-vs-plugin.html">
         8.5.1 Data-Masking Components Versus the Data-Masking Plugin
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="data-masking-components.html">
         8.5.2 MySQL Enterprise Data Masking and De-Identification Components
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="data-masking-plugin.html">
         8.5.3 MySQL Enterprise Data Masking and De-Identification Plugin
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="enterprise-encryption.html">
       8.6 MySQL Enterprise Encryption
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="enterprise-encryption-installation.html">
         8.6.1 MySQL Enterprise Encryption Installation and Upgrading
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="enterprise-encryption-configuring.html">
         8.6.2 Configuring MySQL Enterprise Encryption
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="enterprise-encryption-usage.html">
         8.6.3 MySQL Enterprise Encryption Usage and Examples
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="enterprise-encryption-function-reference.html">
         8.6.4 MySQL Enterprise Encryption Function Reference
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="enterprise-encryption-functions.html">
         8.6.5 MySQL Enterprise Encryption Component Function Descriptions
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="selinux.html">
       8.7 SELinux
      </a>
     </span>
    </dt>
    <dd>
     <dl>
      <dt>
       <span class="section">
        <a href="selinux-checking.html">
         8.7.1 Check if SELinux is Enabled
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="selinux-mode.html">
         8.7.2 Changing the SELinux Mode
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="selinux-policies.html">
         8.7.3 MySQL Server SELinux Policies
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="selinux-file-context.html">
         8.7.4 SELinux File Context
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="selinux-context-tcp-port.html">
         8.7.5 SELinux TCP Port Context
        </a>
       </span>
      </dt>
      <dt>
       <span class="section">
        <a href="selinux-troubleshooting.html">
         8.7.6 Troubleshooting SELinux
        </a>
       </span>
      </dt>
     </dl>
    </dd>
    <dt>
     <span class="section">
      <a href="fips-mode.html">
       8.8 FIPS Support
      </a>
     </span>
    </dt>
   </dl>
  </div>
  <p>
   When thinking about security within a MySQL installation, you should
    consider a wide range of possible topics and how they affect the
    security of your MySQL server and related applications:
  </p>
  <div class="itemizedlist">
   <ul class="itemizedlist" style="list-style-type: disc; ">
    <li class="listitem">
     <p>
      General factors that affect security. These include choosing
        good passwords, not granting unnecessary privileges to users,
        ensuring application security by preventing SQL injections and
        data corruption, and others. See
      <a class="xref" href="general-security-issues.html" title="8.1 General Security Issues">
       Section 8.1, “General Security Issues”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      Security of the installation itself. The data files, log files,
        and the all the application files of your installation should be
        protected to ensure that they are not readable or writable by
        unauthorized parties. For more information, see
      <a class="xref" href="postinstallation.html" title="2.9 Postinstallation Setup and Testing">
       Section 2.9, “Postinstallation Setup and Testing”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      Access control and security within the database system itself,
        including the users and databases granted with access to the
        databases, views and stored programs in use within the database.
        For more information, see
      <a class="xref" href="access-control.html" title="8.2 Access Control and Account Management">
       Section 8.2, “Access Control and Account Management”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      The features offered by security-related plugins. See
      <a class="xref" href="security-plugins.html" title="8.4 Security Components and Plugins">
       Section 8.4, “Security Components and Plugins”
      </a>
      .
     </p>
    </li>
    <li class="listitem">
     <p>
      Network security of MySQL and your system. The security is
        related to the grants for individual users, but you may also
        wish to restrict MySQL so that it is available only locally on
        the MySQL server host, or to a limited set of other hosts.
     </p>
    </li>
    <li class="listitem">
     <p>
      Ensure that you have adequate and appropriate backups of your
        database files, configuration and log files. Also be sure that
        you have a recovery solution in place and test that you are able
        to successfully recover the information from your backups. See
      <a class="xref" href="backup-and-recovery.html" title="Chapter 9 Backup and Recovery">
       Chapter 9,
       <i>
        Backup and Recovery
       </i>
      </a>
      .
     </p>
    </li>
   </ul>
  </div>
  <div class="note" style="margin-left: 0.5in; margin-right: 0.5in;">
   <div class="admon-title">
    Note
   </div>
   <p>
    Several topics in this chapter are also addressed in the
    <a class="ulink" href="/doc/mysql-secure-deployment-guide/en/" target="_top">
     Secure
      Deployment Guide
    </a>
    , which provides procedures for deploying
      a generic binary distribution of MySQL Enterprise Edition Server with features for
      managing the security of your MySQL installation.
   </p>
  </div>
 </div>
 <br/>
</div>
