aboutsummaryrefslogtreecommitdiff
path: root/databases/mysql
diff options
context:
space:
mode:
Diffstat (limited to 'databases/mysql')
-rw-r--r--databases/mysql/README.org183
-rw-r--r--databases/mysql/mysql_admins.sql1
-rw-r--r--databases/mysql/mysql_admins_alt.sql14
-rw-r--r--databases/mysql/passwords.sql13
4 files changed, 211 insertions, 0 deletions
diff --git a/databases/mysql/README.org b/databases/mysql/README.org
new file mode 100644
index 0000000..ce7c438
--- /dev/null
+++ b/databases/mysql/README.org
@@ -0,0 +1,183 @@
+#+title: MySQL
+
+* =mysql_admins.sql=
+
+#+begin_src sql
+SELECT * FROM information_schema.user_privileges;
+#+end_src
+
+#+begin_src
+MySQL [(none)]> SELECT * FROM information_schema.user_privileges;
++--------------------------------+---------------+---------------------------------+--------------+
+| GRANTEE | TABLE_CATALOG | PRIVILEGE_TYPE | IS_GRANTABLE |
++--------------------------------+---------------+---------------------------------+--------------+
+| 'mysql.infoschema'@'localhost' | def | SELECT | NO |
+| 'mysql.infoschema'@'localhost' | def | AUDIT_ABORT_EXEMPT | NO |
+| 'mysql.infoschema'@'localhost' | def | FIREWALL_EXEMPT | NO |
+| 'mysql.infoschema'@'localhost' | def | SYSTEM_USER | NO |
+| 'mysql.session'@'localhost' | def | SHUTDOWN | NO |
+| 'mysql.session'@'localhost' | def | SUPER | NO |
+| 'mysql.session'@'localhost' | def | AUDIT_ABORT_EXEMPT | NO |
+| 'mysql.session'@'localhost' | def | AUTHENTICATION_POLICY_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | BACKUP_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | CLONE_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | CONNECTION_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | FIREWALL_EXEMPT | NO |
+| 'mysql.session'@'localhost' | def | PERSIST_RO_VARIABLES_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | SESSION_VARIABLES_ADMIN | NO |
+| 'mysql.session'@'localhost' | def | SYSTEM_USER | NO |
+| 'mysql.session'@'localhost' | def | SYSTEM_VARIABLES_ADMIN | NO |
+| 'mysql.sys'@'localhost' | def | USAGE | NO |
+| 'mysql.sys'@'localhost' | def | AUDIT_ABORT_EXEMPT | NO |
+| 'mysql.sys'@'localhost' | def | FIREWALL_EXEMPT | NO |
+| 'mysql.sys'@'localhost' | def | SYSTEM_USER | NO |
+| 'root'@'localhost' | def | SELECT | YES |
+| 'root'@'localhost' | def | INSERT | YES |
+| 'root'@'localhost' | def | UPDATE | YES |
+| 'root'@'localhost' | def | DELETE | YES |
+| 'root'@'localhost' | def | CREATE | YES |
+| 'root'@'localhost' | def | DROP | YES |
+| 'root'@'localhost' | def | RELOAD | YES |
+| 'root'@'localhost' | def | SHUTDOWN | YES |
+| 'root'@'localhost' | def | PROCESS | YES |
+| 'root'@'localhost' | def | FILE | YES |
+| 'root'@'localhost' | def | REFERENCES | YES |
+| 'root'@'localhost' | def | INDEX | YES |
+| 'root'@'localhost' | def | ALTER | YES |
+| 'root'@'localhost' | def | SHOW DATABASES | YES |
+| 'root'@'localhost' | def | SUPER | YES |
+| 'root'@'localhost' | def | CREATE TEMPORARY TABLES | YES |
+| 'root'@'localhost' | def | LOCK TABLES | YES |
+| 'root'@'localhost' | def | EXECUTE | YES |
+| 'root'@'localhost' | def | REPLICATION SLAVE | YES |
+| 'root'@'localhost' | def | REPLICATION CLIENT | YES |
+| 'root'@'localhost' | def | CREATE VIEW | YES |
+| 'root'@'localhost' | def | SHOW VIEW | YES |
+| 'root'@'localhost' | def | CREATE ROUTINE | YES |
+| 'root'@'localhost' | def | ALTER ROUTINE | YES |
+| 'root'@'localhost' | def | CREATE USER | YES |
+| 'root'@'localhost' | def | EVENT | YES |
+| 'root'@'localhost' | def | TRIGGER | YES |
+| 'root'@'localhost' | def | CREATE TABLESPACE | YES |
+| 'root'@'localhost' | def | CREATE ROLE | YES |
+| 'root'@'localhost' | def | DROP ROLE | YES |
+| 'root'@'localhost' | def | ALLOW_NONEXISTENT_DEFINER | YES |
+| 'root'@'localhost' | def | APPLICATION_PASSWORD_ADMIN | YES |
+| 'root'@'localhost' | def | AUDIT_ABORT_EXEMPT | YES |
+| 'root'@'localhost' | def | AUDIT_ADMIN | YES |
+| 'root'@'localhost' | def | AUTHENTICATION_POLICY_ADMIN | YES |
+| 'root'@'localhost' | def | BACKUP_ADMIN | YES |
+| 'root'@'localhost' | def | BINLOG_ADMIN | YES |
+| 'root'@'localhost' | def | BINLOG_ENCRYPTION_ADMIN | YES |
+| 'root'@'localhost' | def | CLONE_ADMIN | YES |
+| 'root'@'localhost' | def | CONNECTION_ADMIN | YES |
+| 'root'@'localhost' | def | CREATE_SPATIAL_REFERENCE_SYSTEM | YES |
+| 'root'@'localhost' | def | ENCRYPTION_KEY_ADMIN | YES |
+| 'root'@'localhost' | def | FIREWALL_EXEMPT | YES |
+| 'root'@'localhost' | def | FLUSH_OPTIMIZER_COSTS | YES |
+| 'root'@'localhost' | def | FLUSH_PRIVILEGES | YES |
+| 'root'@'localhost' | def | FLUSH_STATUS | YES |
+| 'root'@'localhost' | def | FLUSH_TABLES | YES |
+| 'root'@'localhost' | def | FLUSH_USER_RESOURCES | YES |
+| 'root'@'localhost' | def | GROUP_REPLICATION_ADMIN | YES |
+| 'root'@'localhost' | def | GROUP_REPLICATION_STREAM | YES |
+| 'root'@'localhost' | def | INNODB_REDO_LOG_ARCHIVE | YES |
+| 'root'@'localhost' | def | INNODB_REDO_LOG_ENABLE | YES |
+| 'root'@'localhost' | def | OPTIMIZE_LOCAL_TABLE | YES |
+| 'root'@'localhost' | def | PASSWORDLESS_USER_ADMIN | YES |
+| 'root'@'localhost' | def | PERSIST_RO_VARIABLES_ADMIN | YES |
+| 'root'@'localhost' | def | REPLICATION_APPLIER | YES |
+| 'root'@'localhost' | def | REPLICATION_SLAVE_ADMIN | YES |
+| 'root'@'localhost' | def | RESOURCE_GROUP_ADMIN | YES |
+| 'root'@'localhost' | def | RESOURCE_GROUP_USER | YES |
+| 'root'@'localhost' | def | ROLE_ADMIN | YES |
+| 'root'@'localhost' | def | SENSITIVE_VARIABLES_OBSERVER | YES |
+| 'root'@'localhost' | def | SERVICE_CONNECTION_ADMIN | YES |
+| 'root'@'localhost' | def | SESSION_VARIABLES_ADMIN | YES |
+| 'root'@'localhost' | def | SET_ANY_DEFINER | YES |
+| 'root'@'localhost' | def | SHOW_ROUTINE | YES |
+| 'root'@'localhost' | def | SYSTEM_USER | YES |
+| 'root'@'localhost' | def | SYSTEM_VARIABLES_ADMIN | YES |
+| 'root'@'localhost' | def | TABLE_ENCRYPTION_ADMIN | YES |
+| 'root'@'localhost' | def | TELEMETRY_LOG_ADMIN | YES |
+| 'root'@'localhost' | def | TRANSACTION_GTID_TAG | YES |
+| 'root'@'localhost' | def | XA_RECOVER_ADMIN | YES |
+| 'cmc'@'%' | def | USAGE | NO |
++--------------------------------+---------------+---------------------------------+--------------+
+92 rows in set (0.001 sec)
+#+end_src
+
+* =passwords.sql=
+
+#+begin_src sql
+SELECT user, host, plugin FROM mysql.user;
+#+end_src
+
+#+begin_src
+mysql> SELECT user, host, plugin FROM mysql.user;
++------------------+-----------+-----------------------+
+| user | host | plugin |
++------------------+-----------+-----------------------+
+| cmc | % | caching_sha2_password |
+| mysql.infoschema | localhost | caching_sha2_password |
+| mysql.session | localhost | caching_sha2_password |
+| mysql.sys | localhost | caching_sha2_password |
+| root | localhost | caching_sha2_password |
++------------------+-----------+-----------------------+
+5 rows in set (0.001 sec)
+#+end_src
+
+#+begin_src sql
+SHOW GLOBAL VARIABLES LIKE 'validate_password%';
+SHOW VARIABLES LIKE 'validate_password%';
+#+end_src
+
+#+begin_src
+mysql> SHOW GLOBAL VARIABLES LIKE 'validate_password%';
++-------------------------------------------------+--------+
+| Variable_name | Value |
++-------------------------------------------------+--------+
+| validate_password.changed_characters_percentage | 0 |
+| validate_password.check_user_name | ON |
+| validate_password.dictionary_file | |
+| validate_password.length | 8 |
+| validate_password.mixed_case_count | 1 |
+| validate_password.number_count | 1 |
+| validate_password.policy | MEDIUM |
+| validate_password.special_char_count | 1 |
++-------------------------------------------------+--------+
+8 rows in set (0.004 sec)
+
+mysql> SHOW VARIABLES LIKE 'validate_password%';
++-------------------------------------------------+--------+
+| Variable_name | Value |
++-------------------------------------------------+--------+
+| validate_password.changed_characters_percentage | 0 |
+| validate_password.check_user_name | ON |
+| validate_password.dictionary_file | |
+| validate_password.length | 8 |
+| validate_password.mixed_case_count | 1 |
+| validate_password.number_count | 1 |
+| validate_password.policy | MEDIUM |
+| validate_password.special_char_count | 1 |
++-------------------------------------------------+--------+
+8 rows in set (0.004 sec)
+#+end_src
+
+#+begin_src sql
+SELECT * FROM mysql.user
+#+end_src
+
+#+begin_src
+MySQL [(none)]> SELECT * FROM mysql.user;
++-----------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+----------------------+-----------------------+------------------------------------------------------------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
+| Host | User | Select_priv | Insert_priv | Update_priv | Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | Process_priv | File_priv | Grant_priv | References_priv | Index_priv | Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | Create_view_priv | Show_view_priv | Create_routine_priv | Alter_routine_priv | Create_user_priv | Event_priv | Trigger_priv | Create_tablespace_priv | ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | max_updates | max_connections | max_user_connections | plugin | authentication_string | password_expired | password_last_changed | password_lifetime | account_locked | Create_role_priv | Drop_role_priv | Password_reuse_history | Password_reuse_time | Password_require_current | User_attributes |
++-----------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+----------------------+-----------------------+------------------------------------------------------------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
+| % | cmc | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 | 0 | caching_sha2_password | | N | 2025-04-25 16:28:52 | NULL | N | N | N | NULL | NULL | NULL | NULL |
+| localhost | mysql.infoschema | Y | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 | 0 | caching_sha2_password | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED | N | 2025-04-25 15:51:53 | NULL | Y | N | N | NULL | NULL | NULL | NULL |
+| localhost | mysql.session | N | N | N | N | N | N | N | Y | N | N | N | N | N | N | N | Y | N | N | N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 | 0 | caching_sha2_password | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED | N | 2025-04-25 15:51:53 | NULL | Y | N | N | NULL | NULL | NULL | NULL |
+| localhost | mysql.sys | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 | 0 | caching_sha2_password | $A$005$THISISACOMBINATIONOFINVALIDSALTANDPASSWORDTHATMUSTNEVERBRBEUSED | N | 2025-04-25 15:51:53 | NULL | Y | N | N | NULL | NULL | NULL | NULL |
+| localhost | root | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y | | | | | 0 | 0 | 0 | 0 | caching_sha2_password | | N | 2025-04-25 15:51:53 | NULL | N | Y | Y | NULL | NULL | NULL | NULL |
++-----------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+------------------+----------------+---------------------+--------------------+------------------+------------+--------------+------------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+----------------------+-----------------------+------------------------------------------------------------------------+------------------+-----------------------+-------------------+----------------+------------------+----------------+------------------------+---------------------+--------------------------+-----------------+
+5 rows in set (0.005 sec)
+#+end_src
diff --git a/databases/mysql/mysql_admins.sql b/databases/mysql/mysql_admins.sql
new file mode 100644
index 0000000..9115ec5
--- /dev/null
+++ b/databases/mysql/mysql_admins.sql
@@ -0,0 +1 @@
+SELECT * FROM information_schema.user_privileges;
diff --git a/databases/mysql/mysql_admins_alt.sql b/databases/mysql/mysql_admins_alt.sql
new file mode 100644
index 0000000..9552ee2
--- /dev/null
+++ b/databases/mysql/mysql_admins_alt.sql
@@ -0,0 +1,14 @@
+-- Global Permissions
+SELECT ... FROM mysql.user;
+
+-- Database Permissions
+SELECT ... FROM mysql.db
+WHERE db = @db_name;
+
+-- Table Permissions
+SELECT ... FROM mysql.tables
+WHERE db = @db_name;
+
+-- Column Permissions
+SELECT ... FROM mysql.columns_priv
+WHERE db = @db_name;
diff --git a/databases/mysql/passwords.sql b/databases/mysql/passwords.sql
new file mode 100644
index 0000000..1a5bf81
--- /dev/null
+++ b/databases/mysql/passwords.sql
@@ -0,0 +1,13 @@
+-- NOTE: Please review the server's "my.cnf" file for default values;
+-- OR: run the "SHOW [GLOBAL | SESSION] VARIABLES" command(s) on the database.
+
+-- Authentication methods only
+SELECT user, host, plugin FROM mysql.user;
+
+-- Default password configuration only
+SHOW GLOBAL VARIABLES LIKE 'validate_password%';
+SHOW VARIABLES LIKE 'validate_password%';
+
+-- Authentication methods and MySQL password configurations
+-- Reference: https://mariadb.com/kb/en/mysql-user-table/
+SELECT * FROM mysql.user
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2025-09-15 17:00:31 +0000