7.5 Ensure No Users Have Wildcard Hostnames

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


MariaDB can make use of host wildcards when granting permissions to users on specific databases. For example, you may grant a given privilege to '<user>'@'%'.


Avoiding the use of wildcards within hostnames helps control the specific locations from which a given user may connect to and interact with the database.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Perform the following actions to remediate this setting:

Enumerate all users returned after running the audit procedure.

Either ALTER the user's host to be specific or DROP the user.

See Also