Update databases.md

[denics]

run mysql_secure_installation to secure the freshly installed mysql server

[dplarson]

Although I agree this is probably a good idea, can you provide more details/justification for adding this step to the installation guide?

[denics]

Hi @dplarson,
it is usually a good practice, in production environments, to use the mysql_secure_installation command, to secure the initial installation. The default mysql installation come with the possibility of an empty root password (!), the possibility to connect as root from outside localhost, the possibility to connect as anonymous and a test db. All of these elements are dangerous, and the script has no side effects.

[dplarson]

So mysql_secure_installation:

1. disables empty root passwords
2. disables connection as root from outside localhost
3. disables anonymous connections
4. removes test database

Sounds good to me. 👍

[denics]

;)

[axilleas]

👍 That's what we have in the CentOS guide. Maybe add some comments like in CentOS for new users:

Secure MySQL by entering a root password and say "Yes" to all questions

[Razer6]

@jacobvosmaer Looks good

[Razer6]

@jacobvosmaer I did not see that this PR was going to 6-0-stable. I think we should cherry-pick this to master

[jacobvosmaer]

Thanks for spotting that @Razer6. I cherry-picked it.