google-sql-mysql-no-local-infile.md

Pattern: Enabled local_infile setting in Google MySQL

Issue: -

Description

Arbitrary files can be read from the system using LOAD_DATA unless this setting is disabled.

Resolution: Disable the local infile setting.

Examples

Example of incorrect code:

resource "google_sql_database_instance" "db" {
	name             = "db"
	database_version = "MYSQL_5_6"
	region           = "us-central1"
	settings {
		database_flags {
			name  = "local_infile"
			value = "on"
		}
	}
}

Example of correct code:

resource "google_sql_database_instance" "db" {
	name             = "db"
	database_version = "MYSQL_5_6"
	region           = "us-central1"
	settings {
		database_flags {
			name  = "local_infile"
			value = "off"
		}
	}
}