Skip to content

Commit c1a0bcb

Browse files
rndmh3roactions-user
rndmh3ro
authored and
actions-user
committed
Prettified Code!
1 parent f295397 commit c1a0bcb

File tree

4 files changed

+1471
-1460
lines changed

4 files changed

+1471
-1460
lines changed

‎roles/mysql_hardening/README.md‎

Lines changed: 100 additions & 98 deletions
Original file line numberDiff line numberDiff line change
@@ -22,107 +22,109 @@ Further information is available at [Deutsche Telekom (German)](http://www.telek
2222
- python-jmespath on the ansible host
2323

2424
<!-- BEGIN_ANSIBLE_DOCS -->
25+
2526
## Supported Operating Systems
26-
| Platform | Versions |
27-
| -------- | -------- |
28-
| EL | 7, 8, 9 |
29-
| Ubuntu | bionic, focal, jammy |
30-
| Debian | bullseye, buster |
31-
| Amazon | |
32-
| opensuse | |
27+
28+
| Platform | Versions |
29+
| -------- | -------------------- |
30+
| EL | 7, 8, 9 |
31+
| Ubuntu | bionic, focal, jammy |
32+
| Debian | bullseye, buster |
33+
| Amazon | |
34+
| opensuse | |
3335

3436
## Role Variables
3537

36-
* `mysql_daemon_enabled`
37-
* Default: `true`
38-
* Description: Whether to enable the MySQL-service so it starts on boot
39-
* Type: bool
40-
* Required: no
41-
* `mysql_hardening_chroot`
42-
* Default: ``
43-
* Description: [chroot](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_chroot)
44-
* Type: str
45-
* Required: no
46-
* `mysql_hardening_chroot.automatic-sp-privileges`
47-
* Default: `0`
48-
* Description: [automatic_sp_privileges](https://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_automatic_sp_privileges)
49-
* Type: int
50-
* Required: no
51-
* `mysql_hardening_enabled`
52-
* Default: `true`
53-
* Description: Whether to run the hardening
54-
* Type: bool
55-
* Required: no
56-
* `mysql_hardening_options.allow-suspicious-udfs`
57-
* Default: `0`
58-
* Description: [allow-suspicious-udfs](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_allow-suspicious-udfs)
59-
* Type: int
60-
* Required: no
61-
* `mysql_hardening_options.local-infile`
62-
* Default: `0`
63-
* Description: [local-infile](http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_local_infile)
64-
* Type: int
65-
* Required: no
66-
* `mysql_hardening_options.safe-user-create`
67-
* Default: `1`
68-
* Description: [safe-user-create](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_safe-user-create)
69-
* Type: int
70-
* Required: no
71-
* `mysql_hardening_options.secure-auth`
72-
* Default: `1`
73-
* Description: [secure-auth](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_secure-auth)
74-
* Type: int
75-
* Required: no
76-
* `mysql_hardening_options.secure-file-priv`
77-
* Default: `/tmp`
78-
* Description: [secure-file-priv](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_secure-file-priv)
79-
* Type: str
80-
* Required: no
81-
* `mysql_hardening_options.skip-symbolic-links`
82-
* Default: `1`
83-
* Description: [skip-symbolic-links](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_symbolic-links)
84-
* Type: int
85-
* Required: no
86-
* `mysql_hardening_restart_mysql`
87-
* Default: `true`
88-
* Description: Restart mysql after running this role
89-
* Type: bool
90-
* Required: no
91-
* `mysql_hardening_skip_grant_tables:`
92-
* Default: `false`
93-
* Description: [skip-grant-tables](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_skip-grant-tables)
94-
* Type: bool
95-
* Required: no
96-
* `mysql_hardening_skip_show_database`
97-
* Default: `1`
98-
* Description: [skip-show-database](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_skip-show-database)
99-
* Type: int
100-
* Required: no
101-
* `mysql_remove_anonymous_users`
102-
* Default: `true`
103-
* Description: Set to `false` to keep users without authentication
104-
* Type: bool
105-
* Required: no
106-
* `mysql_remove_remote_root`
107-
* Default: `true`
108-
* Description: If `true`, root can only connect from localhost. Set to `false` to not remove remote root users.
109-
* Type: bool
110-
* Required: no
111-
* `mysql_remove_test_database`
112-
* Default: `true`
113-
* Description: Set to `false` to keep the test database
114-
* Type: bool
115-
* Required: no
116-
* `mysql_root_password`
117-
* Default: `-----====>SetR00tPa$$wordH3r3!!!<====-----`
118-
* Description: The default password. Please change or overwrite it
119-
* Type: str
120-
* Required: no
121-
* `mysql_user_home`
122-
* Default: `{{ ansible_env.HOME }}`
123-
* Description: The path where the `.my.cnf` will be stored
124-
* Type: str
125-
* Required: no
38+
- `mysql_daemon_enabled`
39+
- Default: `true`
40+
- Description: Whether to enable the MySQL-service so it starts on boot
41+
- Type: bool
42+
- Required: no
43+
- `mysql_hardening_chroot`
44+
- Default: ``
45+
- Description: [chroot](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_chroot)
46+
- Type: str
47+
- Required: no
48+
- `mysql_hardening_chroot.automatic-sp-privileges`
49+
- Default: `0`
50+
- Description: [automatic_sp_privileges](https://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_automatic_sp_privileges)
51+
- Type: int
52+
- Required: no
53+
- `mysql_hardening_enabled`
54+
- Default: `true`
55+
- Description: Whether to run the hardening
56+
- Type: bool
57+
- Required: no
58+
- `mysql_hardening_options.allow-suspicious-udfs`
59+
- Default: `0`
60+
- Description: [allow-suspicious-udfs](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_allow-suspicious-udfs)
61+
- Type: int
62+
- Required: no
63+
- `mysql_hardening_options.local-infile`
64+
- Default: `0`
65+
- Description: [local-infile](http://dev.mysql.com/doc/refman/5.7/en/server-system-variables.html#sysvar_local_infile)
66+
- Type: int
67+
- Required: no
68+
- `mysql_hardening_options.safe-user-create`
69+
- Default: `1`
70+
- Description: [safe-user-create](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_safe-user-create)
71+
- Type: int
72+
- Required: no
73+
- `mysql_hardening_options.secure-auth`
74+
- Default: `1`
75+
- Description: [secure-auth](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_secure-auth)
76+
- Type: int
77+
- Required: no
78+
- `mysql_hardening_options.secure-file-priv`
79+
- Default: `/tmp`
80+
- Description: [secure-file-priv](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_secure-file-priv)
81+
- Type: str
82+
- Required: no
83+
- `mysql_hardening_options.skip-symbolic-links`
84+
- Default: `1`
85+
- Description: [skip-symbolic-links](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_symbolic-links)
86+
- Type: int
87+
- Required: no
88+
- `mysql_hardening_restart_mysql`
89+
- Default: `true`
90+
- Description: Restart mysql after running this role
91+
- Type: bool
92+
- Required: no
93+
- `mysql_hardening_skip_grant_tables:`
94+
- Default: `false`
95+
- Description: [skip-grant-tables](https://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_skip-grant-tables)
96+
- Type: bool
97+
- Required: no
98+
- `mysql_hardening_skip_show_database`
99+
- Default: `1`
100+
- Description: [skip-show-database](http://dev.mysql.com/doc/refman/5.7/en/server-options.html#option_mysqld_skip-show-database)
101+
- Type: int
102+
- Required: no
103+
- `mysql_remove_anonymous_users`
104+
- Default: `true`
105+
- Description: Set to `false` to keep users without authentication
106+
- Type: bool
107+
- Required: no
108+
- `mysql_remove_remote_root`
109+
- Default: `true`
110+
- Description: If `true`, root can only connect from localhost. Set to `false` to not remove remote root users.
111+
- Type: bool
112+
- Required: no
113+
- `mysql_remove_test_database`
114+
- Default: `true`
115+
- Description: Set to `false` to keep the test database
116+
- Type: bool
117+
- Required: no
118+
- `mysql_root_password`
119+
- Default: `-----====>SetR00tPa$$wordH3r3!!!<====-----`
120+
- Description: The default password. Please change or overwrite it
121+
- Type: str
122+
- Required: no
123+
- `mysql_user_home`
124+
- Default: `{{ ansible_env.HOME }}`
125+
- Description: The path where the `.my.cnf` will be stored
126+
- Type: str
127+
- Required: no
126128

127129
## Dependencies
128130

@@ -135,5 +137,5 @@ None.
135137
roles:
136138
- name: devsec.hardening.mysql_hardening
137139
```
138-
<!-- END_ANSIBLE_DOCS -->
139140

141+
<!-- END_ANSIBLE_DOCS -->

0 commit comments

Comments
 (0)