Chapter 6 Security第6章 安全性

Table of Contents目录

6.1 General Security Issues一般安全性问题
6.1.1 Security Guidelines安全性指南
6.1.2 Keeping Passwords Secure确保密码安全
6.1.3 Making MySQL Secure Against Attackers提高MySQL的安全性以抵御攻击者
6.1.4 Security-Related mysqld Options and Variables与安全相关的mysqld选项和变量
6.1.5 How to Run MySQL as a Normal User如何以普通用户身份运行MySQL
6.1.6 Security Considerations for LOAD DATA LOCAL本地加载数据的安全注意事项
6.1.7 Client Programming Security Guidelines客户端编程安全指南
6.2 Access Control and Account Management访问控制和帐户管理
6.2.1 Account User Names and Passwords帐户用户名和密码
6.2.2 Privileges Provided by MySQLMySQL提供的权限
6.2.3 Grant Tables授权表
6.2.4 Specifying Account Names指定帐户名
6.2.5 Specifying Role Names指定角色名
6.2.6 Access Control, Stage 1: Connection Verification访问控制,第1阶段:连接验证
6.2.7 Access Control, Stage 2: Request Verification访问控制,第2阶段:请求验证
6.2.8 Adding Accounts, Assigning Privileges, and Dropping Accounts添加帐户、分配权限和删除帐户
6.2.9 Reserved Accounts保留帐户
6.2.10 Using Roles使用角色
6.2.11 Account Categories帐户类别
6.2.12 Privilege Restriction Using Partial Revokes使用部分撤销的权限限制
6.2.13 When Privilege Changes Take Effect权限更改生效时
6.2.14 Assigning Account Passwords分配帐户密码
6.2.15 Password Management密码管理
6.2.16 Server Handling of Expired Passwords服务器处理过期密码
6.2.17 Pluggable Authentication可插入身份验证
6.2.18 Proxy Users代理用户
6.2.19 Account Locking帐户锁定
6.2.20 Setting Account Resource Limits设置帐户资源限制
6.2.21 Troubleshooting Problems Connecting to MySQLMySQL连接故障排除
6.2.22 SQL-Based Account Activity Auditing基于SQL的帐户活动审核
6.3 Using Encrypted Connections使用加密连接
6.3.1 Configuring MySQL to Use Encrypted Connections配置MySQL以使用加密连接
6.3.2 Encrypted Connection TLS Protocols and Ciphers加密连接TLS协议和密码
6.3.3 Creating SSL and RSA Certificates and Keys创建SSL和RSA证书和密钥
6.3.4 Connecting to MySQL Remotely from Windows with SSH用SSH从Windows远程连接MySQL
6.4 Security Components and Plugins安全组件和插件
6.4.1 Authentication Plugins身份验证插件
6.4.2 The Connection-Control Plugins连接控制插件
6.4.3 The Password Validation Component密码验证组件
6.4.4 The MySQL KeyringMySQL密钥环
6.4.5 MySQL Enterprise AuditMySQL企业审计
6.4.6 The Audit Message Component审核消息组件
6.4.7 MySQL Enterprise FirewallMySQL企业防火墙
6.5 MySQL Enterprise Data Masking and De-IdentificationMySQL企业数据屏蔽和反识别
6.5.1 MySQL Enterprise Data Masking and De-Identification ElementsMySQL企业数据屏蔽和反标识元素
6.5.2 Installing or Uninstalling MySQL Enterprise Data Masking and De-Identification安装或卸载MySQL企业数据屏蔽和反标识
6.5.3 Using MySQL Enterprise Data Masking and De-Identification使用MySQL企业数据屏蔽和反识别
6.5.4 MySQL Enterprise Data Masking and De-Identification Function ReferenceMySQL企业数据屏蔽和反标识功能参考
6.5.5 MySQL Enterprise Data Masking and De-Identification Function DescriptionsMySQL企业数据屏蔽和反标识功能描述
6.6 MySQL Enterprise EncryptionMySQL企业加密
6.6.1 MySQL Enterprise Encryption InstallationMySQL企业加密安装
6.6.2 MySQL Enterprise Encryption Usage and ExamplesMySQL企业加密用法及示例
6.6.3 MySQL Enterprise Encryption Function ReferenceMySQL企业加密函数参考
6.6.4 MySQL Enterprise Encryption Function DescriptionsMySQL企业加密功能说明
6.7 SELinux
6.7.1 Check if SELinux is Enabled检查SELinux是否启用
6.7.2 Changing the SELinux Mode更改SELinux模式
6.7.3 MySQL Server SELinux PoliciesMySQL Server SELinux策略
6.7.4 SELinux File ContextSELinux文件上下文
6.7.5 SELinux TCP Port ContextSELinux TCP端口上下文
6.7.6 Troubleshooting SELinuxSELinux故障排除
6.8 FIPS Support

When thinking about security within a MySQL installation, you should consider a wide range of possible topics and how they affect the security of your MySQL server and related applications:在考虑MySQL安装中的安全性时,您应该考虑各种可能的主题,以及它们如何影响MySQL服务器和相关应用程序的安全性:

Note注意

Several topics in this chapter are also addressed in the Secure Deployment Guide, which provides procedures for deploying a generic binary distribution of MySQL Enterprise Edition Server with features for managing the security of your MySQL installation.《安全部署指南》还介绍了本章中的几个主题,该指南提供了部署MySQL企业版服务器的通用二进制发行版的过程,该发行版具有管理MySQL安装安全性的功能。

6.1 General Security Issues
6.2 Access Control and Account Management
6.3 Using Encrypted Connections
6.4 Security Components and Plugins
6.5 MySQL Enterprise Data Masking and De-Identification
6.6 MySQL Enterprise Encryption
6.7 SELinux
6.8 FIPS Support