Critical security problem

[Robin-Rhee]

Dear Supreeth,

In mysql/mysql-init.sh

mysql -u root -e "ALTER USER 'root'@'%' IDENTIFIED WITH mysql_native_password BY ''"

Here is setting empty password for root user which has an initial password ims
This effectively makes root accessible from any host with no password
I don't quite understand the purpose of this alteration

[herlesupreeth]

This effectively makes root accessible from any host with no password

Slight correction here. Not to any host rather any IP on the host where mysql container is running (because we are not publishing the ports so that its accessible outside of the host where docker is running). Only if your host running the mysql container is compromised then you would have access to root user of mysql

[Robin-Rhee]

Thanks for the reply, buddy 🤞🏻🤞🏻