Merge pull request #10794 from Security-Onion-Solutions/2.4/mysql

2.4/mysql

salt/mysql/enabled.sls

@@ -60,8 +60,11 @@ so-mysql:
       - {{ BIND }}
         {% endfor %}
       {% endif %}
+    - cap_add:
+      - SYS_NICE
     - watch:
-      - /opt/so/conf/mysql/etc
+      - file: mysqlcnf
+      - file: mysqlpass
     - require:
       - file: mysqlcnf
       - file: mysqlpass

salt/mysql/etc/my.cnf

@@ -17,18 +17,16 @@
 # join_buffer_size = 128M
 # sort_buffer_size = 2M
 # read_rnd_buffer_size = 2M
-skip-host-cache
+
+host_cache_size=0
 skip-name-resolve
 datadir=/var/lib/mysql
 socket=/var/lib/mysql/mysql.sock
 secure-file-priv=/var/lib/mysql-files
 user=socore
 
-# Disabling symbolic-links is recommended to prevent assorted security risks
-symbolic-links=0
-
 log-error=/var/log/mysql/mysqld.log
 pid-file=/var/run/mysqld/mysqld.pid
 
 # Switch back to the native password module so that playbook can connect
-default_authentication_plugin=mysql_native_password
+authentication_policy=mysql_native_password