Comments - odd message in my /var/log/message file

4 years, 10 months ago Mark Edwards

sorry i should have added my question:

should i be seeing so many "warnings" about root@localhost ?

 
4 years, 10 months ago Ian Gilfillan

Probably not! If you're getting unexpected connections and connection attempts from localhost, then the machine is compromised.

 
4 years, 10 months ago Mark Edwards

i should also mention that:

 mysql       --host=localhost  --user=root      --password='SUPERSECRET'    ;

works fine.

 
4 years, 10 months ago Mark Edwards

this worked: (finally)

set  global  server_audit_events          = 'CONNECT,QUERY,TABLE'  ;
set  global  server_audit_logging          = 'ON'  ;
set global server_audit_file_rotate_size  =  100000000 ;
SHOW GLOBAL VARIABLES LIKE 'server_audit%';

 grep  DROP    /var/lib/mysql/server_audit.log ;
 tail -f    /var/lib/mysql/server_audit.log ;
 
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.