Information
As with any service installed on a host, it can be provided with its own user context. Providing a dedicated user to the service provides the ability to precisely constrain the service within the larger host context.
Solution
Create a user which is only used for running MySQL and directly related processes. This user must not have administrative rights to the system.