-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathmysql_secure_installation_c8.exp
executable file
·106 lines (102 loc) · 3.64 KB
/
mysql_secure_installation_c8.exp
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
#!/usr/bin/expect -f
#
# This Expect script was generated by autoexpect on Tue Feb 28 23:17:22 2023
# Expect and autoexpect were both written by Don Libes, NIST.
#
# Note that autoexpect does not guarantee a working script. It
# necessarily has to guess about certain things. Two reasons a script
# might fail are:
#
# 1) timing - A surprising number of programs (rn, ksh, zsh, telnet,
# etc.) and devices discard or ignore keystrokes that arrive "too
# quickly" after prompts. If you find your new script hanging up at
# one spot, try adding a short sleep just before the previous send.
# Setting "force_conservative" to 1 (see below) makes Expect do this
# automatically - pausing briefly before sending each character. This
# pacifies every program I know of. The -c flag makes the script do
# this in the first place. The -C flag allows you to define a
# character to toggle this mode off and on.
set force_conservative 0 ;# set to 1 to force conservative mode even if
;# script wasn't run conservatively originally
if {$force_conservative} {
set send_slow {1 .1}
proc send {ignore arg} {
sleep .1
exp_send -s -- $arg
}
}
#
# 2) differing output - Some programs produce different output each time
# they run. The "date" command is an obvious example. Another is
# ftp, if it produces throughput statistics at the end of a file
# transfer. If this causes a problem, delete these patterns or replace
# them with wildcards. An alternative is to use the -p flag (for
# "prompt") which makes Expect only look for the last line of output
# (i.e., the prompt). The -P flag allows you to define a character to
# toggle this mode off and on.
#
# Read the man page for more info.
#
# -Don
set timeout -1
spawn mysql_secure_installation
match_max 100000
expect -exact "\r
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB\r
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!\r
\r
In order to log into MariaDB to secure it, we'll need the current\r
password for the root user. If you've just installed MariaDB, and\r
you haven't set the root password yet, the password will be blank,\r
so you should just press enter here.\r
\r
Enter current password for root (enter for none): "
send -- "\r"
expect -exact "\r
OK, successfully used password, moving on...\r
\r
Setting the root password ensures that nobody can log into the MariaDB\r
root user without the proper authorisation.\r
\r
Set root password? \[Y/n\] "
send -- "n\r"
expect -exact "n\r
... skipping.\r
\r
By default, a MariaDB installation has an anonymous user, allowing anyone\r
to log into MariaDB without having to have a user account created for\r
them. This is intended only for testing, and to make the installation\r
go a bit smoother. You should remove them before moving into a\r
production environment.\r
\r
Remove anonymous users? \[Y/n\] "
send -- "y\r"
expect -exact "y\r
... Success!\r
\r
Normally, root should only be allowed to connect from 'localhost'. This\r
ensures that someone cannot guess at the root password from the network.\r
\r
Disallow root login remotely? \[Y/n\] "
send -- "y\r"
expect -exact "y\r
... Success!\r
\r
By default, MariaDB comes with a database named 'test' that anyone can\r
access. This is also intended only for testing, and should be removed\r
before moving into a production environment.\r
\r
Remove test database and access to it? \[Y/n\] "
send -- "y\r"
expect -exact "y\r
- Dropping test database...\r
... Success!\r
- Removing privileges on test database...\r
... Success!\r
\r
Reloading the privilege tables will ensure that all changes made so far\r
will take effect immediately.\r
\r
Reload privilege tables now? \[Y/n\] "
send -- "y\r"
expect eof