RE: MySQL and the user "su"

[Tom Crimmins <seclists () pottcounty com>]

[snip]
I have today determined that I can connect to a local MySQL-server per
 "mysql -usu".  I regard that to error, can that someone confirm?
[/snip]

This is not an error. You should by default be able to connect with any user
from localhost, but you will not have privileges to do anything else. This
is because the mysql install by default sets up permissions this way. You
could verify this yourself by connecting as root, and executing the
following query:

SELECT * FROM mysql.user;

The row that applies in this case is the one with Host='localhost' and
User=''. You can delete this row if you do not want this behavior. You must
do a "flush privileges;" after deleting the row.

---
Tom Crimmins
Interface Specialist
Pottawattamie County, Iowa
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html