Public bug reported: The comments in the default /etc/mysql/my.cnf file state the following with regard to the bind-address directive:
# Instead of skip-networking the default is now to listen only on # localhost which is more compatible and is not less secure. However this is not the case in 14.04. If the bind-address directive is left commented out, mysqld binds to 0.0.0.0 by default and responds to connections coming into any interface. $ lsb_release -rd Description: Ubuntu 14.04.3 LTS Release: 14.04 $ apt-cache policy mariadb-server-core-5.5 mariadb-server-core-5.5: Installed: 5.5.44-1ubuntu0.14.04.1 Expected behavior: When no bind-address directive is provided in any configuration file read by mariadb, default behavior is documented to be that it binds to the loopback address. What happened instead: mysqld binds to 0.0.0.0:3306 and responds to connections coming in on any interface. ** Affects: mariadb-5.5 (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1486651 Title: Server binds to 0.0.0.0 by default To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mariadb-5.5/+bug/1486651/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs