Subject: Re: MySQL Running as Ingres
To: Curt Sampson <>
From: Hubert Feyrer <>
List: tech-pkg
Date: 07/23/1998 11:59:47
On Wed, 22 Jul 1998, Curt Sampson wrote:
> Does anyone have any objection to me changing the mysql package to
> run as user ingres, rather than user root? This helps to close some
> security holes, since database users can be authorised to use the
> LOAD INFILE command for importing data, which allows that user to
> read any file that the user the database is running as can read.

Um, abusing ingres for mysql seems a bit bad. Either use a general
"database" user (db, whatever), or use a "mysql" login.

 - HF

Hubert Feyrer <>