Wednesday, June 29, 2022

[google-cloud-sql-discuss] Re: How to change root@localhost password or delete user

Unfortunately, it is not possible to delete 'root@localhost' or modify it, according to [1].

[1] https://cloud.google.com/sql/docs/mysql/users#system_users

On Tuesday, June 28, 2022 at 3:57:53 PM UTC-5 snee...@gmail.com wrote:
We have a mysql v5.7 instance. Which got compromised (Ransomware), Attacker delete databases and left one saying where to send money.

Anyway, The logins we found were using admin or root which were having default setting.

We deleted root and admin, including all older users, and created new users with different names. When I list users from GCP Console I seen only newly created users, while listing users through mysql shell I see an addition user (system user): root@localhost.

All GCP created users are regular user. So deleting or changing root@localhost fails.

Is it secure? Is there a way to change or remove it? Does GCP Console provide a way to create "system user"?

I have another instance which does not have root user!
  

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/6def2b4b-2525-4168-b491-e4c5db630398n%40googlegroups.com.

No comments:

Post a Comment