Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-5303

rpm post-inst scriptlet creates mysql user with a valid shell

        Details

        • Type: Bug
        • Status: Closed
        • Priority: Major
        • Resolution: Fixed
        • Affects Version/s: 5.5.33a
        • Fix Version/s: 5.5.35
        • Component/s: None
        • Labels:
          None

          Description

          rpm post-inst scriptlet creates mysql user with a valid shell.

          This is completely unnecessary and poses extra security risk. mysql account should use /sbin/nologin instead

            Gliffy Diagrams

              Attachments

                Activity

                Hide
                Permalink
                dbart Daniel Bartholomew added a comment -

                http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/3995

                Show
                dbart Daniel Bartholomew added a comment - http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/3995

                  People

                  • Assignee:
                    serg Sergei Golubchik
                    Reporter:
                    serg Sergei Golubchik
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    2 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: