Re: [gentoo-user] Reconciling users and services

[kashani <kashani-list@badapple.net>]

Grant wrote:
>>> mysql only needs to connect to a daemon running on the same system,
>>> and I think it does so via a unix socket as opposed to tcp.  I can see
>>> from netstat that /var/run/mysqld/mysqld.sock is connected, there is
>>> no mention of a tcp mysql connection, and nmap does not show a mysql
>>> port to be open.  Is there anything else I should do as far as locking
>>> down mysql?  I'm the only one with shell access to the system.
>> mysql should be running as a non-root user (probably mysql) and for what you
>> use, should be listening on localhost only. If you need to connect over the
> 
> How can I check to make sure mysql is only listening to localhost?  It
> doesn't show up with nmap.
> 
> - Grant

sudo netstat -ptln

It' also works without sudo, but then you don't see the process 
associated with the open TCP port.

kashani