Security

• Don't share the root account

  • Force admins to either use personally named accounts
  • Or ssh to the server and then connect locally as root

• Carefeully setup and re-evaluate application-level permissions

  • Don't give apps ALL PRIVILEGES ON *.*