1.4 Verify that 'MYSQL_PWD' Is Not Set

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The use of the MYSQL_PWD environment variable implies the clear text storage of MySQL credentials.

Solution

Check which users and/or scripts are setting MYSQL_PWD and change them to use a more secure method.

See Also

https://workbench.cisecurity.org/files/1619

Item Details

Audit Name: CIS MySQL 5.7 Enterprise Linux OS L1 v1.0.0

Plugin: Unix

Control ID: bef794e10243a80d205db73cd7361e3d5f3869914ac7b4e65e94913e56b848ab