MySQL database instance ‘local_infile’ database flag should be set to ‘off’¶
Description¶
The MySQL database instance ‘local_infile’ flag controls server-side LOCAL capabilities for LOAD DATA statements. If permitted, clients can perform local data loading, which can be a security risk.
Remediation Steps¶
Google Cloud Console¶
Navigate to Cloud SQL instances.
Click on the Cloud SQL MySQL database instance name to go to the Overview page.
Click EDIT and scroll down to the Flags section.
Select ADD FLAG, choose the local_infile flag, and set the value to off.
Click DONE.
gcloud CLI¶
Set the
local_infile
database flag tooff
for each Cloud SQL MySQL database instance:gcloud sql instances patch INSTANCE_NAME --database-flags local_infile=off