Table of Contents目录
When thinking about security within a MySQL installation, you should consider a wide range of possible topics and how they affect the security of your MySQL server and related applications:在考虑MySQL安装中的安全性时,您应该考虑各种可能的主题,以及它们如何影响MySQL服务器和相关应用程序的安全性:
General factors that affect security. 影响安全的一般因素。These include choosing good passwords, not granting unnecessary privileges to users, ensuring application security by preventing SQL injections and data corruption, and others. 这些措施包括选择好的密码、不向用户授予不必要的特权、通过防止SQL注入和数据损坏来确保应用程序安全,以及其他措施。See Section 6.1, “General Security Issues”.请参阅第6.1节“一般安全问题”。
Security of the installation itself. 安装本身的安全性。The data files, log files, and the all the application files of your installation should be protected to ensure that they are not readable or writable by unauthorized parties. 数据文件、日志文件和安装的所有应用程序文件都应受到保护,以确保它们不被未经授权的方可读写。For more information, see Section 2.10, “Postinstallation Setup and Testing”.有关更多信息,请参阅第2.10节“安装后设置和测试”。
Access control and security within the database system itself, including the users and databases granted with access to the databases, views and stored programs in use within the database. 数据库系统本身的访问控制和安全性,包括被授予访问数据库、视图和数据库中使用的存储程序的用户和数据库。For more information, see Section 6.2, “Access Control and Account Management”.有关更多信息,请参阅第6.2节“访问控制和帐户管理”。
The features offered by security-related plugins. 安全相关插件提供的特性。See Section 6.4, “Security Components and Plugins”.请参阅第6.4节“安全组件和插件”。
Network security of MySQL and your system. MySQL和您的系统的网络安全。The security is related to the grants for individual users, but you may also wish to restrict MySQL so that it is available only locally on the MySQL server host, or to a limited set of other hosts.安全性与对单个用户的授权有关,但是您也可能希望限制MySQL,使其仅在MySQL服务器主机上本地可用,或者仅对一组有限的其他主机可用。
Ensure that you have adequate and appropriate backups of your database files, configuration and log files. 确保对数据库文件、配置和日志文件进行了充分和适当的备份。Also be sure that you have a recovery solution in place and test that you are able to successfully recover the information from your backups. 还要确保您有一个恢复解决方案,并测试您是否能够成功地从备份中恢复信息。See Chapter 7, Backup and Recovery.请参阅第7章“备份和恢复”。
Several topics in this chapter are also addressed in the Secure Deployment Guide, which provides procedures for deploying a generic binary distribution of MySQL Enterprise Edition Server with features for managing the security of your MySQL installation.《安全部署指南》还介绍了本章中的几个主题,该指南提供了部署MySQL企业版服务器的通用二进制发行版的过程,该发行版具有管理MySQL安装安全性的功能。