{"id":194,"date":"2025-11-07T14:16:47","date_gmt":"2025-11-07T14:16:47","guid":{"rendered":"https:\/\/adveyer.com\/blog\/?p=194"},"modified":"2025-11-07T14:16:47","modified_gmt":"2025-11-07T14:16:47","slug":"mysql-root-sifresi-degistirme","status":"publish","type":"post","link":"https:\/\/adveyer.com\/blog\/mysql-root-sifresi-degistirme\/","title":{"rendered":"MySQL Root \u015eifresi De\u011fi\u015ftirme"},"content":{"rendered":"

MySQL \/ MariaDB sunucular\u0131nda root<\/strong> (veya root<\/code> benzeri y\u00f6netici) hesab\u0131n\u0131n \u015fifresini de\u011fi\u015ftirmek, hem rutin g\u00fcvenlik bak\u0131m\u0131 hem de bir parola s\u0131z\u0131nt\u0131s\u0131 sonras\u0131 yap\u0131lmas\u0131 gereken kritik bir i\u015flemdir. Bu rehberte hem normal ko\u015fullarda parola de\u011fi\u015ftirme hem de kurtarma (reset)<\/strong> senaryolar\u0131, Debian\/Ubuntu farklar\u0131 (auth_socket), Red Hat\/CentOS, Docker, sistem servisleri, SELinux\/AppArmor ve s\u0131k kar\u015f\u0131la\u015f\u0131lan hatalarla nas\u0131l ba\u015fa \u00e7\u0131k\u0131laca\u011f\u0131 detayl\u0131 olarak ele al\u0131nm\u0131\u015ft\u0131r.<\/p>\n

\n

Not: Bu rehberi uygularseniz \u00f6nce mutlaka yedek al\u0131n ve canl\u0131 \u00fcretim sunucular\u0131nda de\u011fi\u015fiklik yapmadan \u00f6nce test ortam\u0131nda denemeyi unutmay\u0131n.<\/p>\n<\/blockquote>\n

Neden MySQL root \u015fifresi de\u011fi\u015ftirmelisiniz?<\/h2>\n
    \n
  • \n

    Parola s\u0131zd\u0131ysa (g\u00fcvenlik ihlali).<\/p>\n<\/li>\n

  • \n

    D\u00fczenli parola d\u00f6ng\u00fcs\u00fc politikas\u0131 uyguluyorsan\u0131z.<\/p>\n<\/li>\n

  • \n

    Yeni bir security audit\/denetim sonras\u0131 isteniyorsa.<\/p>\n<\/li>\n

  • \n

    Sunucu devralma (handover) veya personel de\u011fi\u015fikli\u011fi durumlar\u0131nda.<\/p>\n<\/li>\n<\/ul>\n

    \u00d6n Haz\u0131rl\u0131k \u2014 Riskleri Azaltma<\/h2>\n
      \n
    1. \n

      Veritaban\u0131 yede\u011fi al\u0131n.<\/strong>
      mysqldump --all-databases --single-transaction -u root -p > all_dbs.sql<\/code> veya sunucu seviyesinde snapshot.<\/p>\n<\/li>\n

    2. \n

      Uygulamalar\u0131n ba\u011flant\u0131 bilgilerini kontrol edin.<\/strong> Root parolas\u0131n\u0131 de\u011fi\u015ftirirken \u00fcretimde root eri\u015fiminin uygulamalar taraf\u0131ndan nadiren kullan\u0131ld\u0131\u011f\u0131n\u0131 unutmay\u0131n \u2014 \u00e7o\u011fu uygulama ayr\u0131 DB kullan\u0131c\u0131lar\u0131yla ba\u011flan\u0131r. Root parolas\u0131n\u0131 de\u011fi\u015ftirmek ba\u011flant\u0131 sorunlar\u0131na yol a\u00e7mamal\u0131 fakat yine de konfig\u00fcrasyonlarda root kullanan cron\/script var m\u0131 kontrol edin.<\/p>\n<\/li>\n

    3. \n

      Eri\u015fim y\u00f6ntemlerini belirleyin.<\/strong> (SSH anahtarlar\u0131 haz\u0131r, hizmet durumu takip sistemleri bilgilendirildi vb.)<\/p>\n<\/li>\n

    4. \n

      Sunucuya konsol veya SSH ile root eri\u015fiminiz oldu\u011fundan emin olun.<\/strong> E\u011fer uzak eri\u015fim tek yoldaysa bir ba\u011flant\u0131 kesilmesi durumunu planlay\u0131n.<\/p>\n<\/li>\n<\/ol>\n

      Temel Y\u00f6ntemler \u2014 Hangi durum hangi y\u00f6ntem?<\/h2>\n
        \n
      • \n

        Normal durum (root parolas\u0131n\u0131 biliyorsan\u0131z):<\/strong> ALTER USER<\/code> \/ SET PASSWORD<\/code> komutu ile de\u011fi\u015ftirin.<\/p>\n<\/li>\n

      • \n

        Root parolas\u0131n\u0131 unuttuysan\u0131z veya kaybettiyseniz:<\/strong> skip-grant-tables<\/code> ile MySQL’i g\u00fcvenli modda ba\u015flat\u0131p parolay\u0131 de\u011fi\u015ftirin veya auth_socket<\/code>\/system auth hangi y\u00f6ntemi kullan\u0131yorsa ona g\u00f6re i\u015flem yap\u0131n.<\/p>\n<\/li>\n

      • \n

        Debian\/Ubuntu (auth_socket) durumunda:<\/strong> root parolas\u0131 yerine sudo mysql<\/code> ile root olabiliyorsan\u0131z ALTER USER 'root'@'localhost' IDENTIFIED BY 'YeniSifre';<\/code> komutu kullan\u0131l\u0131r.<\/p>\n<\/li>\n

      • \n

        Cloud \/ Paket kurulumlarda (\u00f6r. Amazon RDS, managed MySQL):<\/strong> genellikle kendi y\u00f6netim konsolu \u00fczerinden parola de\u011fi\u015fimi gerekir \u2014 sunucuya eri\u015fim ve skip-grant-tables<\/code> m\u00fcmk\u00fcn olmayabilir.<\/p>\n<\/li>\n<\/ul>\n

        1) Normal \u015fekilde (root parolas\u0131 biliniyorsa) \u2014 g\u00fcvenli yol<\/h2>\n

        MySQL 5.7+ \/ MariaDB \/ MySQL 8 i\u00e7in \u00f6nerilen:<\/h3>\n
        \n
        -- mysql -u root -p<\/span>\r\nALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY<\/span> 'YeniG\u00fc\u00e7l\u00fcParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
          \n
        • \n
          MySQL 8’de ALTER USER<\/code> en do\u011fru y\u00f6ntemdir.<\/p>\n<\/li>\n
        • \n
          MariaDB veya eski MySQL s\u00fcr\u00fcmlerinde SET PASSWORD FOR<\/code> veya UPDATE mysql.user<\/code> gerekebilir.<\/p>\n<\/li>\n<\/ul>\n
          \u00d6rnek (MariaDB \/ MySQL 5.6 ve alt\u0131):<\/p>\n
          \n
          SET<\/span> PASSWORD FOR<\/span> 'root'<\/span>@'localhost'<\/span> =<\/span> PASSWORD('YeniG\u00fc\u00e7l\u00fcParola!'<\/span>);\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
          \n
          G\u00fc\u00e7l\u00fc parola: en az 12-16 karakter, b\u00fcy\u00fck\/k\u00fc\u00e7\u00fck harf, rakam, sembol kar\u0131\u015f\u0131m\u0131. Parola y\u00f6neticisi (1Password\/Bitwarden) kullan\u0131n.<\/p>\n<\/blockquote>\n
          2) Debian\/Ubuntu (auth_socket) \u2014 root parolas\u0131 yok\/\u015fifre kullan\u0131lm\u0131yorsa<\/h2>\n
          Debian\/Ubuntu paketlerindeki baz\u0131 MySQL\/MariaDB kurulumlar\u0131 auth_socket<\/code> plugin\u2019i ile root kullan\u0131c\u0131y\u0131 UNIX socket \u00fczerinden OS root kullan\u0131c\u0131s\u0131 olarak do\u011frular. Bu durumda mysql -u root -p<\/code> parola istemeyebilir; bunun yerine sudo mysql<\/code> ile do\u011frudan ba\u011flanabilirsiniz.<\/p>\n
          Ad\u0131mlar:<\/p>\n
          \n
          sudo mysql\r\n# MariaDB veya MySQL prompt geldi\u011finde:<\/span>\r\nALTER USER 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY 'YeniG\u00fc\u00e7l\u00fcParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\nEXIT;\r\n<\/code><\/pre>\n<\/div>\n
          E\u011fer auth_socket<\/code>‘i kald\u0131r\u0131p parola ile giri\u015f olmaya d\u00f6nmek istersen:<\/p>\n
          \n
          ALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED WITH<\/span> mysql_native_password BY<\/span> 'YeniG\u00fc\u00e7l\u00fcParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
          \n
          MariaDB’de plugin isimleri farkl\u0131 olabilir (unix_socket<\/code> vs auth_socket<\/code>). SELECT user, host, plugin FROM mysql.user;<\/code> ile kontrol edin.<\/p>\n<\/blockquote>\n
          3) Root parola unutulduysa \u2014 skip-grant-tables<\/code> ile kurtarma (en \u00e7ok kullan\u0131lan y\u00f6ntem)<\/h2>\n
          Uyar\u0131:<\/strong> skip-grant-tables<\/code> modu yetkisiz eri\u015fime olanak verir; bu i\u015flem s\u0131ras\u0131nda sunucuya d\u0131\u015far\u0131dan eri\u015fimi engellemeniz (firewall, iptables, ip blocking) ve k\u0131sa s\u00fcrede i\u015flem yapman\u0131z gerekir.<\/p>\n
          Ad\u0131mlar (systemd tabanl\u0131 sistemler i\u00e7in):<\/h3>\n
            \n
          1. \n
            MySQL servisini durdurun:<\/p>\n<\/li>\n<\/ol>\n
            \n
            <\/div>\n
            sudo systemctl stop mysqld       # CentOS\/RedHat<\/span>\r\nsudo systemctl stop mysql        # Debian\/Ubuntu<\/span>\r\n<\/code><\/pre>\n<\/div>\n
              \n
            1. \n
              MySQL’i grant kontrol\u00fc kapal\u0131 olarak ba\u015flat\u0131n:<\/p>\n<\/li>\n<\/ol>\n
              \n
              <\/div>\n
              sudo mysqld_safe --skip-grant-tables --skip-networking &   # --skip-networking ile d\u0131\u015f eri\u015fimi engelle<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                \n
              1. \n
                Yeni terminalde MySQL’e root olarak ba\u011flan\u0131n (parola sormaz):<\/p>\n<\/li>\n<\/ol>\n
                \n
                <\/div>\n
                mysql -u root\r\n<\/code><\/pre>\n<\/div>\n
                  \n
                1. \n
                  Parolay\u0131 g\u00fcncelleyin:<\/p>\n<\/li>\n<\/ol>\n
                  \n
                  <\/div>\n
                  FLUSH PRIVILEGES;   -- bazen ilk olarak flush de\u011fil hemen ALTER kullan\u0131n<\/span>\r\nALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY<\/span> 'YeniG\u00fc\u00e7l\u00fcParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                  E\u011fer ALTER USER<\/code> hata verirse (\u00e7ok eski s\u00fcr\u00fcm) \u015fu \u015fekilde deneyin:<\/p>\n
                  \n
                  USE mysql;\r\nUPDATE<\/span> user<\/span> SET<\/span> authentication_string=<\/span>PASSWORD('YeniG\u00fc\u00e7l\u00fcParola!'<\/span>) WHERE<\/span> User<\/span>=<\/span>'root'<\/span> AND<\/span> Host=<\/span>'localhost'<\/span>;\r\n-- veya MySQL versiyonuna g\u00f6re:<\/span>\r\nUPDATE<\/span> mysql.user SET<\/span> Password=<\/span>PASSWORD('YeniG\u00fc\u00e7l\u00fcParola!'<\/span>) WHERE<\/span> User<\/span>=<\/span>'root'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                    \n
                  1. \n
                    MySQL’i kapat\u0131p normal ba\u015flat\u0131n:<\/p>\n<\/li>\n<\/ol>\n
                    \n
                    <\/div>\n
                    sudo pkill mysqld\r\nsudo systemctl start mysqld\r\n<\/code><\/pre>\n<\/div>\n
                      \n
                    1. \n
                      Yeni parolay\u0131 test edin:<\/p>\n<\/li>\n<\/ol>\n
                      \n
                      <\/div>\n
                      mysql -u root -p\r\n# parola girildi\u011finde root eri\u015fimi gelmeli<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                      4) E\u011fer paket kurulum s\u0131ras\u0131nda temporary root password verildiyse (\u00f6r. MySQL 5.7+)<\/h2>\n
                      Baz\u0131 MySQL kurulumlar\u0131 tmp root parolas\u0131 \u00fcretir ve bu \/var\/log\/mysqld.log<\/code> veya \/var\/log\/mysql\/error.log<\/code> i\u00e7inde yer al\u0131r. E\u011fer kurulurken bu parola kullan\u0131ld\u0131ysa ilk giri\u015fte de\u011fi\u015ftirmeniz isteniyordu.<\/p>\n
                      Ge\u00e7ici parola bulma:<\/p>\n
                      \n
                      sudo grep 'temporary password'<\/span> \/var\/log\/mysqld.log\r\n<\/code><\/pre>\n<\/div>\n
                      Ard\u0131ndan:<\/p>\n
                      \n
                      mysql -u root -p   # temporary password girin<\/span>\r\nALTER USER 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY 'YeniParola1!'<\/span>;\r\n<\/code><\/pre>\n<\/div>\n
                      5) Docker konteyner i\u00e7indeki MySQL root parolas\u0131 de\u011fi\u015ftirme<\/h2>\n
                      Konteyner i\u00e7indeyse:<\/p>\n
                      \n
                      # konteyner name \u00f6\u011fren<\/span>\r\ndocker exec<\/span> -it mysql_container bash\r\nmysql -u root -p\r\nALTER USER 'root'<\/span>@'%'<\/span> IDENTIFIED BY 'YeniParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                      E\u011fer konteyneri yeniden ba\u015flatt\u0131\u011f\u0131n\u0131zda env de\u011fi\u015fkeni (MYSQL_ROOT_PASSWORD<\/code>) ile otomatik set ediliyorsa, docker-compose dosyan\u0131zda bu de\u011feri de\u011fi\u015ftirmeyi unutmay\u0131n.<\/p>\n
                      Konteyner d\u0131\u015f\u0131nda host’tan:<\/p>\n
                      \n
                      docker exec<\/span> -it mysql_container mysql -u root -p -e \"ALTER USER 'root'@'localhost' IDENTIFIED BY 'YeniParola!'; FLUSH PRIVILEGES;\"<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                      6) MySQL s\u00fcr\u00fcm\u00fcne g\u00f6re dikkat edilmesi gerekenler<\/h2>\n
                        \n
                      • \n
                        MySQL 8:<\/strong> authentication_string<\/code> ve caching_sha2_password kullan\u0131labilir. ALTER USER<\/code> ile plugin belirtmezsen yeni default plugin kullan\u0131labilir. E\u011fer eski mysql_native_password<\/code> istiyorsan\u0131z:<\/p>\n<\/li>\n<\/ul>\n
                        \n
                        <\/div>\n
                        ALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED WITH<\/span> mysql_native_password BY<\/span> 'YeniParola!'<\/span>;\r\n<\/code><\/pre>\n<\/div>\n
                          \n
                        • \n
                          MariaDB:<\/strong> plugin isimleri mysql_native_password<\/code>, unix_socket<\/code> veya pam<\/code> olabilir. MariaDB 10.x versiyonunda ALTER USER<\/code> yerine SET PASSWORD<\/code> komutu da \u00e7al\u0131\u015f\u0131r.<\/p>\n<\/li>\n
                        • \n
                          Eski MySQL (5.5\/5.6):<\/strong> UPDATE mysql.user SET Password=PASSWORD('...')<\/code> muhtemel. FLUSH PRIVILEGES<\/code> \u015fart.<\/p>\n<\/li>\n<\/ul>\n
                          7) Remote root eri\u015fimi ve g\u00fcvenlik<\/h2>\n
                            \n
                          • \n
                            Root hesab\u0131n\u0131n Host<\/code> s\u00fctununda genelde localhost<\/code> vard\u0131r. E\u011fer 'root'@'%'<\/code> veya 'root'@'192.168.%'<\/code> gibi uzak ba\u011flant\u0131 izinleri varsa root hesab\u0131 uzaktan ba\u011flanabilir \u2014 bu g\u00fcvenlik riski yarat\u0131r. Uzak root eri\u015fimine izin vermeyin:<\/p>\n<\/li>\n<\/ul>\n
                            \n
                            <\/div>\n
                            SELECT<\/span> Host, User<\/span> FROM<\/span> mysql.user WHERE<\/span> User<\/span>=<\/span>'root'<\/span>;\r\n<\/code><\/pre>\n<\/div>\n
                              \n
                            • \n
                              Uzaktan root eri\u015fimini iptal etmek i\u00e7in:<\/p>\n<\/li>\n<\/ul>\n
                              \n
                              <\/div>\n
                              DELETE<\/span> FROM<\/span> mysql.user WHERE<\/span> User<\/span>=<\/span>'root'<\/span> AND<\/span> Host NOT<\/span> IN<\/span> ('localhost'<\/span>,'127.0.0.1'<\/span>,'::1'<\/span>);\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                                \n
                              • \n
                                Root yerine uygulamalar i\u00e7in minimum yetkili<\/strong> (least-privilege) kullan\u0131c\u0131lar kullan\u0131n.<\/p>\n<\/li>\n<\/ul>\n
                                8) \u015eifre politikas\u0131, karma (hash) ve parola saklama<\/h2>\n
                                  \n
                                • \n
                                  MySQL 8 default olarak caching_sha2_password<\/code> kullan\u0131r \u2014 baz\u0131 eski client’lar desteklemeyebilir. Gerekirse mysql_native_password<\/code> kullan\u0131m\u0131yla uyumluluk sa\u011flay\u0131n.<\/p>\n<\/li>\n
                                • \n
                                  Parola asla plaintext dosyalarda saklanmamal\u0131. Konfig\u00fcrasyonda \/root\/.my.cnf<\/code> gibi chmod 600<\/code> ile eri\u015fimi k\u0131s\u0131tlanm\u0131\u015f dosyaya [client]<\/code> b\u00f6l\u00fcm\u00fc ekleyebilirsiniz:<\/p>\n<\/li>\n<\/ul>\n
                                  \n
                                  <\/div>\n
                                  [client]<\/span>\r\nuser<\/span>=root\r\npassword<\/span>=YeniParola!\r\n<\/code><\/pre>\n<\/div>\n
                                  Ama bu da risklidir \u2014 uygulamalar i\u00e7in ayr\u0131, s\u0131n\u0131rl\u0131 hakl\u0131 kullan\u0131c\u0131lar kullan\u0131n.<\/p>\n
                                  9) Otomasyon ve parola d\u00f6nd\u00fcrme (rotation)<\/h2>\n
                                    \n
                                  • \n
                                    Parolay\u0131 de\u011fi\u015ftirecekseniz, bu de\u011fi\u015fikli\u011fi kullanan uygulama konfig\u00fcrasyonlar\u0131, cron job’lar, backup scriptleri gibi t\u00fcm ba\u011flant\u0131 noktalar\u0131nda g\u00fcncelleyin.<\/p>\n<\/li>\n
                                  • \n
                                    Parola rotasyonu i\u00e7in plan: \u00f6rne\u011fin 90 g\u00fcnde bir parola de\u011fi\u015fimi, kay\u0131tl\u0131 de\u011fi\u015fiklik ge\u00e7mi\u015fi ve bir parola y\u00f6netim sistemi kullan\u0131n.<\/p>\n<\/li>\n
                                  • \n
                                    Parola de\u011fi\u015fikliklerini CI\/CD pipeline veya config management ara\u00e7lar\u0131 (Ansible, Puppet, Chef) ile merkezi y\u00f6netin. Ansible \u00f6rne\u011fi:<\/p>\n<\/li>\n<\/ul>\n
                                    \n
                                    \n
                                    \n
                                    <\/div>\n<\/div>\n<\/div>\n
                                    -<\/span> name:<\/span> Change<\/span> MySQL<\/span> root<\/span> password<\/span>\r\n  mysql_user:<\/span>\r\n    login_user:<\/span> root<\/span>\r\n    login_password:<\/span> \"{{ old_root_password }}<\/span><\/span>\"\r\n    name:<\/span> root<\/span>\r\n    host:<\/span> localhost<\/span>\r\n    password:<\/span> \"{{ new_root_password }}<\/span><\/span>\"\r\n    check_implicit_admin:<\/span> yes<\/span>\r\n    state:<\/span> present<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                                    10) S\u0131k Kar\u015f\u0131la\u015f\u0131lan Hatalar ve \u00c7\u00f6z\u00fcmleri<\/h2>\n
                                      \n
                                    • \n
                                      ERROR 1698 (auth_socket)<\/strong>: Debian’da auth_socket<\/code> plugin aktifse sudo mysql<\/code> ile ba\u011flan\u0131n ve ALTER USER<\/code> yap\u0131n veya plugin’i de\u011fi\u015ftirin.<\/p>\n<\/li>\n
                                    • \n
                                      Access denied for user ‘root’@’localhost’<\/strong>: Parola yanl\u0131\u015f veya plugin farkl\u0131; sudo mysql<\/code> ile socket auth deneyin. E\u011fer parola unutulduysa skip-grant-tables<\/code> yoluna gidin.<\/p>\n<\/li>\n
                                    • \n
                                      Can’t connect to local MySQL server through socket<\/strong>: MySQL servis \u00e7al\u0131\u015fm\u0131yor olabilir. systemctl status mysqld<\/code> \/ service mysql status<\/code> kontrol edin.<\/p>\n<\/li>\n
                                    • \n
                                      After skip-grant-tables, ALTER USER gives error<\/strong>: baz\u0131 s\u00fcr\u00fcmlerde \u00f6nce FLUSH PRIVILEGES;<\/code> gerek ve UPDATE mysql.user<\/code> ile manuel de\u011fi\u015fiklik gerekebilir.<\/p>\n<\/li>\n
                                    • \n
                                      SELinux\/AppArmor deny<\/strong>: servis restart sonras\u0131 eri\u015fim sorunlar\u0131 AppArmor\/SELinux profilleri nedeniyle olabilir. audit.log<\/code> kontrol edin ve gerekli policy izinlerini ekleyin veya SELinux permissive modda test edin (setenforce 0<\/code>) \u2014 production’da policy uygun \u015fekilde d\u00fczenleyin.<\/p>\n<\/li>\n<\/ul>\n
                                      11) \u00d6rnek ad\u0131m ad\u0131m senaryo \u2014 Debian 11 \/ MySQL 8 normal de\u011fi\u015fim<\/h2>\n
                                        \n
                                      1. \n
                                        Yedek al:<\/p>\n<\/li>\n<\/ol>\n
                                        \n
                                        <\/div>\n
                                        mysqldump --all-databases --single-transaction -u root -p > \/root\/all_dbs_$(date<\/span> +%F).sql\r\n<\/code><\/pre>\n<\/div>\n
                                          \n
                                        1. \n
                                          Root ile giri\u015f:<\/p>\n<\/li>\n<\/ol>\n
                                          \n
                                          <\/div>\n
                                          mysql -u root -p\r\n<\/code><\/pre>\n<\/div>\n
                                            \n
                                          1. \n
                                            Parolay\u0131 de\u011fi\u015ftir:<\/p>\n<\/li>\n<\/ol>\n
                                            \n
                                            <\/div>\n
                                            ALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED WITH<\/span> caching_sha2_password BY<\/span> 'S\u00fcperG\u00fc\u00e7l\u00fcParola1!'<\/span>;\r\nFLUSH PRIVILEGES;\r\nEXIT;\r\n<\/code><\/pre>\n<\/div>\n
                                              \n
                                            1. \n
                                              Test:<\/p>\n<\/li>\n<\/ol>\n
                                              \n
                                              <\/div>\n
                                              mysql -u root -p\r\n# yeni parola ile giri\u015f do\u011frulay\u0131n<\/span>\r\n<\/code><\/pre>\n<\/div>\n
                                              12) Ek G\u00fcvenlik \u00d6nerileri<\/h2>\n
                                                \n
                                              • \n
                                                Root eri\u015fimini sadece y\u00f6netim gerektiren g\u00fcnlerde a\u00e7\u0131n.<\/strong> Normal operasyonlarda root hesab\u0131n\u0131 kapal\u0131 tutun (lock).<\/p>\n<\/li>\n
                                              • \n
                                                \u0130ki Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (2FA)<\/strong>: MySQL do\u011frudan 2FA desteklemez ancak y\u00f6netici eri\u015fimi i\u00e7in SSH ve kontrol panellerinde 2FA kullan\u0131n.<\/p>\n<\/li>\n
                                              • \n
                                                Database firewall & network rules<\/strong>: MySQL portunu (3306<\/code>) d\u0131\u015f eri\u015fime a\u00e7may\u0131n; sadece y\u00f6netilen IP\u2019leri whitelist yap\u0131n.<\/p>\n<\/li>\n
                                              • \n
                                                Audit & Logging<\/strong>: mysql.audit_log<\/code> veya proxy audit ile kim ne zaman de\u011fi\u015ftirdi izleyin.<\/p>\n<\/li>\n
                                              • \n
                                                Least privilege<\/strong>: Uygulamalar i\u00e7in ayr\u0131 kullan\u0131c\u0131lar ve en az gerekli izinleri verin.<\/p>\n<\/li>\n<\/ul>\n
                                                13) \u00d6zet \u2014 H\u0131zl\u0131 Yol Haritas\u0131<\/h2>\n
                                                  \n
                                                1. \n
                                                  Yedek al\u0131n.<\/p>\n<\/li>\n
                                                2. \n
                                                  Root parolas\u0131n\u0131 biliyorsan\u0131z ALTER USER<\/code> ile g\u00fcvenli \u015fekilde de\u011fi\u015ftirin.<\/p>\n<\/li>\n
                                                3. \n
                                                  Parolay\u0131 bilmiyorsan\u0131z skip-grant-tables<\/code> veya paket \u00f6zel durumu (auth_socket) yoluyla resetleyin.<\/p>\n<\/li>\n
                                                4. \n
                                                  De\u011fi\u015fiklik sonras\u0131 servisleri yeniden ba\u015flat\u0131n ve uygulamalar\u0131 kontrol edin.<\/p>\n<\/li>\n
                                                5. \n
                                                  Uzak root eri\u015fimini kapat\u0131n, parola politikas\u0131 uygulay\u0131n, yedek ve logging kurallar\u0131n\u0131 olu\u015fturun.<\/p>\n<\/li>\n<\/ol>\n
                                                  14) Faydal\u0131 Komut \u00d6zetleri<\/h2>\n
                                                  Root parolas\u0131 de\u011fi\u015ftir (MySQL 8):<\/strong><\/p>\n
                                                  \n
                                                  ALTER<\/span> USER<\/span> 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY<\/span> 'YeniParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                                                  Debian auth_socket -> parola ile de\u011fi\u015ftirme:<\/strong><\/p>\n
                                                  \n
                                                  sudo mysql\r\nALTER USER 'root'<\/span>@'localhost'<\/span> IDENTIFIED WITH mysql_native_password BY 'YeniParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n<\/code><\/pre>\n<\/div>\n
                                                  skip-grant-tables kurtarma (k\u0131sa \u00f6zet):<\/strong><\/p>\n
                                                  \n
                                                  sudo systemctl stop mysql\r\nsudo mysqld_safe --skip-grant-tables --skip-networking &\r\nmysql -u root\r\n-- mysql prompt:\r\nALTER USER 'root'<\/span>@'localhost'<\/span> IDENTIFIED BY 'YeniParola!'<\/span>;\r\nFLUSH PRIVILEGES;\r\n# sonra mysqld stop\/start<\/span>\r\n<\/code><\/pre>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
                                                  MySQL \/ MariaDB sunucular\u0131nda root (veya root benzeri y\u00f6netici) hesab\u0131n\u0131n \u015fifresini de\u011fi\u015ftirmek, hem rutin g\u00fcvenlik bak\u0131m\u0131 hem de bir parola s\u0131z\u0131nt\u0131s\u0131 sonras\u0131 yap\u0131lmas\u0131 gereken kritik bir i\u015flemdir. Bu rehberte hem normal ko\u015fullarda parola de\u011fi\u015ftirme hem de kurtarma (reset) senaryolar\u0131, Debian\/Ubuntu farklar\u0131 (auth_socket), Red Hat\/CentOS, Docker, sistem servisleri, SELinux\/AppArmor ve s\u0131k kar\u015f\u0131la\u015f\u0131lan hatalarla nas\u0131l ba\u015fa \u00e7\u0131k\u0131laca\u011f\u0131 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[],"class_list":["post-194","post","type-post","status-publish","format-standard","hentry","category-linux-genel"],"_links":{"self":[{"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/posts\/194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/comments?post=194"}],"version-history":[{"count":1,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/posts\/194\/revisions"}],"predecessor-version":[{"id":195,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/posts\/194\/revisions\/195"}],"wp:attachment":[{"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/media?parent=194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/categories?post=194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adveyer.com\/blog\/wp-json\/wp\/v2\/tags?post=194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}