1.6 Verify That 'MYSQL_PWD' is Not Set in Users' Profiles - .profile

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

MySQL can read a default database password from an environment variable called MYSQL_PWD.

Rationale:

Use of the MYSQL_PWD environment variable implies MySQL credentials are stored as clear text. Avoiding use of this environment variable may increase assurance that the confidentiality of MySQL credentials is preserved.

Solution

Check which users and/or scripts are setting MYSQL_PWD and change them to use a more secure method.

Default Value:

Not set.

See Also

https://workbench.cisecurity.org/benchmarks/12903