Recommend A Backup User / Privileges?

I downloaded a MySQL backup script today since I have 3 or 4
relatively small databases. The script can be found here:

http://sourceforge.net/projects/automysqlbackup/

Now I was wondering if I can create a local database user
'backup'@'localhost' & grant him a level of permissions needed to
perform a 'mysqldump' so he can backup the databases to an directory
on the server. My Question is what level or permissions does a user
need to perform a 'mysqldump' on a database since that particular
user's password will be entered into the script noted above via plain
text. I am scared the password will be compromised & that would be bad
if it's root or someone who has GRANT ALL PRIVILEGES ON *.*.

Can you guys recommend something for me here? I don't really know
enough about MySQL 'grant' permissions to determine which would work
or if the 'backup' user would require high level privileges.

-Carlos

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=gcdmg-mysql-2@m.gmane.org

Re: Recommend A Backup User / Privileges?

--0016e640d174abee2f04855b1aee
Content-Type: text/plain; charset=ISO-8859-1

Hi Carlos,


I would say the below grants for a user to perform backup is the minimum
grants which we can provide..

grant select , lock tables, file on *.* to backup_user'@'localhost'
identified by 'somepassword';

Thanks
Anand

On Wed, Apr 28, 2010 at 10:28 PM, Carlos Mennens wrote:

> I downloaded a MySQL backup script today since I have 3 or 4
> relatively small databases. The script can be found here:
>
> http://sourceforge.net/projects/automysqlbackup/
>
> Now I was wondering if I can create a local database user
> 'backup'@'localhost' & grant him a level of permissions needed to
> perform a 'mysqldump' so he can backup the databases to an directory
> on the server. My Question is what level or permissions does a user
> need to perform a 'mysqldump' on a database since that particular
> user's password will be entered into the script noted above via plain
> text. I am scared the password will be compromised & that would be bad
> if it's root or someone who has GRANT ALL PRIVILEGES ON *.*.
>
> Can you guys recommend something for me here? I don't really know
> enough about MySQL 'grant' permissions to determine which would work
> or if the 'backup' user would require high level privileges.
>
> -Carlos
>
> --
> MySQL General Mailing List
> For list archives: http://lists.mysql.com/mysql
> To unsubscribe: http://lists.mysql.com/mysql?unsub=anand.srm@gmail.com
>
>

--0016e640d174abee2f04855b1aee--

RE: Recommend A Backup User / Privileges?

=20

Carlos mennens wrote:
>=20
> Can you guys recommend something for me here? I don't really=20
> know enough about MySQL 'grant' permissions to determine=20
> which would work or if the 'backup' user would require high=20
> level privileges.
>=20
Hi,

Set the rights of the script file to rwx------ . So only the owner can read=
it. Or provide in the home of the user who executes the script a file name=
d .my.cnf . Inside that file you provide a section [mysqld] , where you can=
specify the user and the password to connect to the database. Also this fi=
le has only to be readable for the user who executes the script (rwx------)=
..


Bernd

--
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe: http://lists.mysql.com/mysql?unsub=3Dgcdmg-mysql-2@m.gmane.o rg