More Info:

skip_show_database’ database flag prevents people from using the SHOW DATABASES statement if they do not have the SHOW DATABASES privilege. This can improve security if you have concerns about users being able to see databases belonging to other users. Its effect depends on the SHOW DATABASES privilege: If the variable value is ON, the SHOW DATABASES statement is permitted only to users who have the SHOW DATABASES privilege, and the statement displays all database names. If the value is OFF, SHOW DATABASES is permitted to all users, but displays the names of only those databases for which the user has the SHOW DATABASES or other privilege. This recommendation is applicable to Mysql database instances.

Risk Level

Low

Address

Reliability, Security

Compliance Standards

CISGCP, CBP

Triage and Remediation

Remediation

To remediate the MySQL Skip Show Database Flag Should Be On misconfiguration for GCP using GCP console, please follow these steps:

  1. Go to the Google Cloud Console and select your project.
  2. In the left-hand menu, select “SQL” under the “Storage” section.
  3. Select the instance that you want to remediate.
  4. Click on the “Edit” button at the top of the page.
  5. Scroll down to the “Flags” section and click on the “Add item” button.
  6. In the “Name” field, enter “skip_show_database”.
  7. In the “Value” field, enter “ON”.
  8. Click on the “Save” button at the bottom of the page.

Once you have completed these steps, the MySQL Skip Show Database Flag will be set to “ON” for your GCP instance, and the misconfiguration will be remediated.

Additional Reading: