4.2 Ensure Example or Test Databases are Not Installed on Production Servers

Information

The default MySQL installation does not contain any example or test databases. However, it is a good idea to review for common example databases and ensure they have been removed from production systems.

Rationale:

Dropping example databases will reduce the attack surface of the MySQL server.

Solution

Execute the following SQL statement to drop an example database:

DROP DATABASE <database name>;

Default Value:

By default, MySQL 8.0 does not contain any example or test databases.

See Also

https://workbench.cisecurity.org/benchmarks/15112

Item Details

Category: PLANNING, SYSTEM AND SERVICES ACQUISITION

References: 800-53|PL-8, 800-53|SA-8

Plugin: MySQLDB

Control ID: 1182daba2fa70cb6fbd99f671fd7b04b07a34f1d79d64e66291f71d9712a3a5f