* mysql configuration stripped of private information (such as password):
#
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
#
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://dev.mysql.com/doc/mysql/en/server-system-variables.html
# This will be passed to all mysql clients
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/debian.cnf when changing the socket location.
[client]
port = 3306
socket = /var/run/mysqld/mysqld.sock
# Here is entries for some specific programs
# The following values assume you have at least 32M ram
# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket = /var/run/mysqld/mysqld.sock
nice = 0
[mysqld]
#
# * Basic Settings
#
user = mysql
pid-file = /var/run/mysqld/mysqld.pid
socket = /var/run/mysqld/mysqld.sock
port = 3306
basedir = /usr
datadir = /var/lib/mysql
tmpdir = /tmp
language = /usr/share/mysql/english
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address = 127.0.0.1
#
# * Fine Tuning
#
key_buffer = 16M
max_allowed_packet = 16M
thread_stack = 128K
thread_cache_size = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover = BACKUP
#max_connections = 100
#table_cache = 64
#thread_concurrency = 10
#
# * Query Cache Configuration
#
query_cache_limit = 1M
query_cache_size = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file = /var/log/mysql/mysql.log
#general_log = 1
#
# Error logging goes to syslog due to /etc/mysql/conf.d/mysqld_safe_syslog.cnf.
#
# Here you can see queries with especially long duration
#log_slow_queries = /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
# other settings you may need to change.
#server-id = 1
#log_bin = /var/log/mysql/mysql-bin.log
expire_logs_days = 10
max_binlog_size = 100M
#binlog_do_db = include_database_name
#binlog_ignore_db = include_database_name
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem
[mysql]
#no-auto-rehash # faster start of mysql but no tab completition
[isamchk]
key_buffer = 16M
#
# * IMPORTANT: Additional settings that can override those from this file!
# The files must end with '.cnf', otherwise they'll be ignored.
#
!includedir /etc/mysql/conf.d/
* extra mysql configuration from the conf.d directory:
adam@adam:~$ gedit /etc/mysql/conf.d/
[gedit opens and says: "/etc/mysql/conf.d is a directory."]
adam@adam:~$ ls -l /etc/mysql/conf.d/
total 0
adam@adam:~$ /etc/mysql/conf.d/
bash: /etc/mysql/conf.d/: is a directory
* directory listing of mysql datadir (by default /var/lib/mysql):
total 20572
drwx------ 2 mysql mysql 4096 2009-07-11 17:55 180bishop
drwx------ 2 mysql mysql 4096 2009-07-11 17:56 ahopadmin
drwx------ 2 mysql mysql 4096 2009-07-11 17:56 ahoplaw
-rw-r--r-- 1 mysql mysql 0 2009-08-17 17:33 debian-5.0.flag
-rw-rw---- 1 mysql mysql 10485760 2009-10-22 19:30 ibdata1
-rw-rw---- 1 mysql mysql 5242880 2009-10-22 19:31 ib_logfile0
-rw-rw---- 1 mysql mysql 5242880 2009-07-09 20:38 ib_logfile1
drwxr-xr-x 2 mysql mysql 4096 2009-08-17 17:33 mysql
-rw------- 1 mysql mysql 6 2009-07-09 20:38 mysql_upgrade_info
drwx------ 2 mysql mysql 4096 2009-07-09 20:42 phpmyadmin
drwx------ 2 mysql mysql 4096 2009-07-11 18:00 recipetavern
drwx------ 2 mysql mysql 12288 2009-07-11 18:08 temp
* content of /var/log/daemon.log related to mysql processes:
N/A
* apparmor audit messages related to mysqld:
N/A
* mysqld apparmor profile:
# vim:syntax=apparmor
# Last Modified: Tue Jun 19 17:37:30 2007
#include <tunables/global>
/usr/sbin/mysqld { nameservice> user-tmp> mysql> winbind>
#include <abstractions/base>
#include <abstractions/
#include <abstractions/
#include <abstractions/
#include <abstractions/
capability dac_override,
capability sys_resource,
capability setgid,
capability setuid,
network tcp,
/etc/hosts.allow r,
/etc/hosts.deny r,
/etc/mysql/*.pem r, mysql/conf. d/ r, mysql/conf. d/* r, share/mysql/ ** r, log/mysql. log rw, log/mysql. err rw, run/mysqld/ mysqld. pid w, run/mysqld/ mysqld. sock w,
/etc/
/etc/
/etc/mysql/my.cnf r,
/usr/sbin/mysqld mr,
/usr/
/var/
/var/
/var/lib/mysql/ r,
/var/lib/mysql/** rwk,
/var/log/mysql/ r,
/var/log/mysql/* rw,
/var/
/var/
}
* list of mysqld apparmor profiles:
-rw-r--r-- 1 root root 788 2009-05-14 06:39 /etc/apparmor. d/usr.sbin. mysqld
* mysql configuration stripped of private information (such as password):
# dev.mysql. com/doc/ mysql/en/ server- system- variables. html
# The MySQL database server configuration file.
#
# You can copy this to one of:
# - "/etc/mysql/my.cnf" to set global options,
# - "~/.my.cnf" to set user-specific options.
#
# One can use all long options that the program supports.
# Run program with --help to get a list of available options and with
# --print-defaults to see which it would actually understand and use.
#
# For explanations see
# http://
# This will be passed to all mysql clients debian. cnf when changing the socket location. mysqld/ mysqld. sock
# It has been reported that passwords should be enclosed with ticks/quotes
# escpecially if they contain "#" chars...
# Remember to edit /etc/mysql/
[client]
port = 3306
socket = /var/run/
# Here is entries for some specific programs
# The following values assume you have at least 32M ram
# This was formally known as [safe_mysqld]. Both versions are currently parsed. mysqld/ mysqld. sock
[mysqld_safe]
socket = /var/run/
nice = 0
[mysqld] mysqld/ mysqld. pid mysqld/ mysqld. sock mysql/english locking mysql/mysql. log conf.d/ mysqld_ safe_syslog. cnf. mysql/mysql- slow.log not-using- indexes mysql/mysql- bin.log database_ name database_ name /etc/mysql/ cacert. pem /etc/mysql/ server- cert.pem /etc/mysql/ server- key.pem
#
# * Basic Settings
#
user = mysql
pid-file = /var/run/
socket = /var/run/
port = 3306
basedir = /usr
datadir = /var/lib/mysql
tmpdir = /tmp
language = /usr/share/
skip-external-
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address = 127.0.0.1
#
# * Fine Tuning
#
key_buffer = 16M
max_allowed_packet = 16M
thread_stack = 128K
thread_cache_size = 8
# This replaces the startup script and checks MyISAM tables if needed
# the first time they are touched
myisam-recover = BACKUP
#max_connections = 100
#table_cache = 64
#thread_concurrency = 10
#
# * Query Cache Configuration
#
query_cache_limit = 1M
query_cache_size = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
# As of 5.1 you can enable the log at runtime!
#general_log_file = /var/log/
#general_log = 1
#
# Error logging goes to syslog due to /etc/mysql/
#
# Here you can see queries with especially long duration
#log_slow_queries = /var/log/
#long_query_time = 2
#log-queries-
#
# The following can be used as easy to replay backup logs or for replication.
# note: if you are setting up a replication slave, see README.Debian about
# other settings you may need to change.
#server-id = 1
#log_bin = /var/log/
expire_logs_days = 10
max_binlog_size = 100M
#binlog_do_db = include_
#binlog_ignore_db = include_
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=
# ssl-cert=
# ssl-key=
[mysqldump]
quick
quote-names
max_allowed_packet = 16M
[mysql]
#no-auto-rehash # faster start of mysql but no tab completition
[isamchk]
key_buffer = 16M
#
# * IMPORTANT: Additional settings that can override those from this file!
# The files must end with '.cnf', otherwise they'll be ignored.
#
!includedir /etc/mysql/conf.d/
* extra mysql configuration from the conf.d directory:
adam@adam:~$ gedit /etc/mysql/conf.d/
[gedit opens and says: "/etc/mysql/conf.d is a directory."]
adam@adam:~$ ls -l /etc/mysql/conf.d/
total 0
adam@adam:~$ /etc/mysql/conf.d/
bash: /etc/mysql/conf.d/: is a directory
* directory listing of mysql datadir (by default /var/lib/mysql):
total 20572
drwx------ 2 mysql mysql 4096 2009-07-11 17:55 180bishop
drwx------ 2 mysql mysql 4096 2009-07-11 17:56 ahopadmin
drwx------ 2 mysql mysql 4096 2009-07-11 17:56 ahoplaw
-rw-r--r-- 1 mysql mysql 0 2009-08-17 17:33 debian-5.0.flag
-rw-rw---- 1 mysql mysql 10485760 2009-10-22 19:30 ibdata1
-rw-rw---- 1 mysql mysql 5242880 2009-10-22 19:31 ib_logfile0
-rw-rw---- 1 mysql mysql 5242880 2009-07-09 20:38 ib_logfile1
drwxr-xr-x 2 mysql mysql 4096 2009-08-17 17:33 mysql
-rw------- 1 mysql mysql 6 2009-07-09 20:38 mysql_upgrade_info
drwx------ 2 mysql mysql 4096 2009-07-09 20:42 phpmyadmin
drwx------ 2 mysql mysql 4096 2009-07-11 18:00 recipetavern
drwx------ 2 mysql mysql 12288 2009-07-11 18:08 temp