The system
command in the mysql
client command line program doesn't run commands on the MySQL server machine. (If it did, can you imagine how easy it would be for cybercriminals to pwn IT infrastructure?)
It runs them on the same machine upon which you are running mysql
.
The mysql
command ordinarily runs with the same user and set of permissions as the shell program that invoked it. So, anything users could do with mysql system
they could also do in the shell used to run it.
Therefore, disabling the mysql system
command is unnecessary and insufficient for tightening system security.
(Users without shells are another story. If you have those kinds of users, you probably should disable the system command.)
If you don't trust the user who must run the mysql
client you'll need to grant them a limited environment. You can look up chroot
for that.