Subject: MySQL Running as Ingres
To: None <tech-pkg@NetBSD.ORG, firstname.lastname@example.org>
From: Curt Sampson <email@example.com>
Date: 07/22/1998 15:13:35
Does anyone have any objection to me changing the mysql package to
run as user ingres, rather than user root? This helps to close some
security holes, since database users can be authorised to use the
LOAD INFILE command for importing data, which allows that user to
read any file that the user the database is running as can read.
Curt Sampson firstname.lastname@example.org Info at http://www.portal.ca/
Internet Portal Services, Inc. Through infinite mist, software reverberates
Vancouver, BC (604) 257-9400 In code possess'd of invisible folly.