Skip to content

Remove Docker bridge MySQL principal with default credentials#166

Merged
MoneroOcean merged 1 commit into
masterfrom
codex/propose-fix-for-mysql-user-vulnerability
May 22, 2026
Merged

Remove Docker bridge MySQL principal with default credentials#166
MoneroOcean merged 1 commit into
masterfrom
codex/propose-fix-for-mysql-user-vulnerability

Conversation

@MoneroOcean
Copy link
Copy Markdown
Owner

Motivation

  • Deployment bootstrap deployment/base.sql created a non-loopback MySQL principal pool@172.17.0.1 using the repository default password which broadened privileged DB access beyond loopback and exposed sensitive tables and configuration.

Description

  • Removed the CREATE USER pool@172.17.0.1 line and the corresponding `GRANT ALL ON pool.* TO pool@`172.17.0.1 from deployment/base.sql, preserving the existing 127.0.0.1 and localhost principals.

Testing

  • Ran automated file inspections with sed -n '1,40p' deployment/base.sql and nl -ba deployment/base.sql | sed -n '1,15p' and confirmed the file no longer contains the 172.17.0.1 user or its GRANT ALL entry; these checks succeeded.

Codex Task

@MoneroOcean MoneroOcean merged commit 72b3e6c into master May 22, 2026
2 checks passed
@MoneroOcean MoneroOcean deleted the codex/propose-fix-for-mysql-user-vulnerability branch May 22, 2026 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant