Re: [packagers] [[e-mail]: [bugtraq] MySQL user can be changed to root]

[Dmitry V. Levin]

On Sun, Mar 09, 2003 at 04:47:30PM +0100, Christian Hammers wrote:
> What do other distros regarding this issue? I plan to remove
> /var/lib/mysql from the list of search paths.

I'm going to package /var/lib/mysql/my.cnf owned by root and with
root-only write access.

Together with sticky bit set for /var/lib/mysql (we do it by default) this
should fix the issue.

> I have not yet tested it, but I think the right place to edit
> is line 53-55 in mysys/defaults.c.

I'm afraid it may break existing configurations.


--
ldv

Attachment: [application/pgp-signature]