MariaDB / mariadb-docker

Docker Official Image packaging for MariaDB
https://mariadb.org
GNU General Public License v2.0
755 stars 436 forks source link

entrypoint does not remove anonymous user #544

Closed NiroDeveloper closed 8 months ago

NiroDeveloper commented 8 months ago

By default, a MariaDB installation has an anonymous user, allowing anyone to log into MariaDB without having to have a user account created for them. This is intended only for testing, and to make the installation go a bit smoother. You should remove them before moving into a production environment. This is copy paste from the mariadb-secure-installation output.

Problem is that the docker-entrypoint.sh is not running the secure installation and is also not deleting the anonymous user.

grooverdan commented 8 months ago

Did you see the note - https://github.com/MariaDB/mariadb-docker/blob/master/docker-entrypoint.sh#L443

Also:

$ podman exec m106 mariadb -pbo -e 'select User,Host from mysql.global_priv'
User    Host
root    %
healthcheck 127.0.0.1
healthcheck ::1
healthcheck localhost
mariadb.sys localhost
root    localhost

No anonymous users.