Page 1 of 1

security in vicidial

PostPosted: Wed Apr 27, 2011 3:17 am
by raloheni
Hi
vicidialredux
verison 2.2.1
no extra software


i have given a strong password for the root and also to the vicidial admin access to gui

my doubt was whether the hacker can hack my mysql using the cron and 1234 credentials or using root and vicidialnow in goautodial servers

PostPosted: Wed Apr 27, 2011 3:26 am
by boybawang
if your using stand alone server you should set the my.conf add this setting:

bind_address = 127.0.0.1

so that mysql will not be accessible from the outside

in which context

PostPosted: Wed Apr 27, 2011 3:36 am
by raloheni
In which context i have to add the bind address

[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Default to using old password format for compatibility with mysql 3.x
# clients (those using the mysqlclient10 compatibility package).
old_passwords=1
skip-name-resolve
skip-host-cache
max_connections=200

[mysql.server]
user=mysql
basedir=/var/lib

[mysqld_safe]
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid

PostPosted: Wed Apr 27, 2011 10:45 am
by williamconley
also, the mysql port should not be open in a single server installation.