1

In case of mysql attacks, many times user extracts information from information_schema.

can i do something in mysql that can restricts user to xtracts information from information_schema while all privileges on rest database is available.

1 Answer 1

2

When you grant permission, you specify the database and table names that you're allowing access to. Don't give unprivileged users modification privileges to *.*, list the databases explicitly in the grants.

1
  • +1 Don't allow access to the mysql database for these users, either. Apr 8, 2013 at 7:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.