Subject: MySQL Running as Ingres
To: None <tech-pkg@NetBSD.ORG, tsarna@endicor.com>
From: Curt Sampson <cjs@portal.ca>
List: tech-pkg
Date: 07/22/1998 15:13:35
Does anyone have any objection to me changing the mysql package to
run as user ingres, rather than user root? This helps to close some
security holes, since database users can be authorised to use the
LOAD INFILE command for importing data, which allows that user to
read any file that the user the database is running as can read.

cjs

Curt Sampson    cjs@portal.ca	   Info at http://www.portal.ca/
Internet Portal Services, Inc.	   Through infinite mist, software reverberates
Vancouver, BC  (604) 257-9400	   In code possess'd of invisible folly.