On Wed, 22 Jul 1998, Curt Sampson wrote:
> Does anyone have any objection to me changing the mysql package to
> run as user ingres, rather than user root? This helps to close some
> security holes, since database users can be authorised to use the
> LOAD INFILE command for importing data, which allows that user to
> read any file that the user the database is running as can read.

Um, abusing ingres for mysql seems a bit bad. Either use a general
"database" user (db, whatever), or use a "mysql" login.


 - HF

-- 
Hubert Feyrer <hubert.feyrer@rz.uni-regensburg.de>