We are using MySQL Community version on Windows and are trying to secure it as best we can. Assuming that changing the version (for example purchasing the Enterprise edition) is not possible in our environment, I would love to hear how others are doing things such as:
- Password rules
- Account disabling after inactive for X days
- Integrity checking
- Steganography detection
For example, we are using the general log for our cheap "auditing". Maybe not the best solution, but something is better than nothing. Any free tools out there, or maybe homegrown scripts anyone would like to suggest?