Consider that local disk files are accessible via MySQL with commands such as:
mysql> LOAD DATA LOCAL INFILE ‘/etc/passwd’ INTO TABLE mypasswords;
What change could be made to stop any breach via this insecurity?
executing REVOKE LOAD FROM *.*
setting the --local-service=0 option when starting mysqld
executing REVOKE FILE FROM *.*
executing REVOKE FILE ON *.* FROM ‘ ’ @’%’
setting the --local-infile=0 option when starting mysqld
setting the --open-files-limit=0 option when starting mysqld
Submit