MariaDB systemd file enforce
ProtectHome=true
That prevent to start mysqld if the datadir is set to /home/mysql/data
mariadb-service-convert does not search en enforce
ProtectHome=false
if datadir is set to non allowed path
relates to
MDEV-25177
Better indication of refusing to start because of ProtectHome
Closed
Elena Stepanova
made changes -
2017-03-13 16:16
Field
Original Value
New Value
Fix Version/s
10.1
[ 16100
]
Assignee
Sergey Vojtovich
[ svoj
]
Sergey Vojtovich
made changes -
2018-03-14 09:44
Assignee
Sergey Vojtovich
[ svoj
]
Vicentiu Ciorbaru
[ cvicentiu
]
Sergei Golubchik
made changes -
2019-04-10 11:54
Assignee
Vicentiu Ciorbaru
[ cvicentiu
]
Axel Schwenke
[ axel
]
Daniel Black
made changes -
2021-03-11 06:24
Fix Version/s
10.2
[ 14601
]
Fix Version/s
10.5
[ 23123
]
Daniel Black
made changes -
2021-03-11 06:24
Environment
Debian Jessie
Debian Jessie, RPM based distros too.
Axel Schwenke
made changes -
2021-09-16 09:32
Assignee
Axel Schwenke
[ axel
]
Daniel Black
[ danblack
]
Sergei Golubchik
made changes -
2021-12-06 21:32
Workflow
MariaDB v3
[ 79946
]
MariaDB v4
[ 140247
]
Julien Fritsch
made changes -
2023-04-27 15:15
Fix Version/s
10.2
[ 14601
]
Daniel Black
made changes -
2023-09-19 02:22
Assignee
Daniel Black
[ danblack
]
{"report":{"fcp":1192.7000000476837,"ttfb":304.7999999523163,"pageVisibility":"visible","entityId":60540,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"bffa6c91-a506-4e73-b163-aba7ee2838aa","navigationType":0,"readyForUser":1262.2000000476837,"redirectCount":0,"resourceLoadedEnd":1401.5,"resourceLoadedStart":310,"resourceTiming":[{"duration":387.90000009536743,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":310,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":310,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":697.9000000953674,"responseStart":0,"secureConnectionStart":0},{"duration":387.90000009536743,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":310.2999999523163,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":310.2999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":698.2000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":396.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":310.5,"connectEnd":310.5,"connectStart":310.5,"domainLookupEnd":310.5,"domainLookupStart":310.5,"fetchStart":310.5,"redirectEnd":0,"redirectStart":0,"requestStart":310.5,"responseEnd":707,"responseStart":707,"secureConnectionStart":310.5},{"duration":516.7999999523163,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":310.60000014305115,"connectEnd":310.60000014305115,"connectStart":310.60000014305115,"domainLookupEnd":310.60000014305115,"domainLookupStart":310.60000014305115,"fetchStart":310.60000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":310.60000014305115,"responseEnd":827.4000000953674,"responseStart":827.4000000953674,"secureConnectionStart":310.60000014305115},{"duration":520,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":310.7999999523163,"connectEnd":310.7999999523163,"connectStart":310.7999999523163,"domainLookupEnd":310.7999999523163,"domainLookupStart":310.7999999523163,"fetchStart":310.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":310.7999999523163,"responseEnd":830.7999999523163,"responseStart":830.7999999523163,"secureConnectionStart":310.7999999523163},{"duration":520.1000001430511,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":311,"connectEnd":311,"connectStart":311,"domainLookupEnd":311,"domainLookupStart":311,"fetchStart":311,"redirectEnd":0,"redirectStart":0,"requestStart":311,"responseEnd":831.1000001430511,"responseStart":831.1000001430511,"secureConnectionStart":311},{"duration":520.4000000953674,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":311.2000000476837,"connectEnd":311.2000000476837,"connectStart":311.2000000476837,"domainLookupEnd":311.2000000476837,"domainLookupStart":311.2000000476837,"fetchStart":311.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":311.2000000476837,"responseEnd":831.6000001430511,"responseStart":831.6000001430511,"secureConnectionStart":311.2000000476837},{"duration":539.0999999046326,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":311.40000009536743,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":311.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":850.5,"responseStart":0,"secureConnectionStart":0},{"duration":520.5,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":311.5,"connectEnd":311.5,"connectStart":311.5,"domainLookupEnd":311.5,"domainLookupStart":311.5,"fetchStart":311.5,"redirectEnd":0,"redirectStart":0,"requestStart":311.5,"responseEnd":832,"responseStart":832,"secureConnectionStart":311.5},{"duration":538.9000000953674,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":311.7000000476837,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":311.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":850.6000001430511,"responseStart":0,"secureConnectionStart":0},{"duration":520.8000001907349,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":311.7999999523163,"connectEnd":311.7999999523163,"connectStart":311.7999999523163,"domainLookupEnd":311.7999999523163,"domainLookupStart":311.7999999523163,"fetchStart":311.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":311.7999999523163,"responseEnd":832.6000001430511,"responseStart":832.6000001430511,"secureConnectionStart":311.7999999523163},{"duration":1060.7000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":312.7000000476837,"connectEnd":312.7000000476837,"connectStart":312.7000000476837,"domainLookupEnd":312.7000000476837,"domainLookupStart":312.7000000476837,"fetchStart":312.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":312.7000000476837,"responseEnd":1373.4000000953674,"responseStart":1373.4000000953674,"secureConnectionStart":312.7000000476837},{"duration":1056.7999999523163,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":317.10000014305115,"connectEnd":317.10000014305115,"connectStart":317.10000014305115,"domainLookupEnd":317.10000014305115,"domainLookupStart":317.10000014305115,"fetchStart":317.10000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":317.10000014305115,"responseEnd":1373.9000000953674,"responseStart":1373.9000000953674,"secureConnectionStart":317.10000014305115},{"duration":209.90000009536743,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":862.2000000476837,"connectEnd":862.2000000476837,"connectStart":862.2000000476837,"domainLookupEnd":862.2000000476837,"domainLookupStart":862.2000000476837,"fetchStart":862.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":862.2000000476837,"responseEnd":1072.1000001430511,"responseStart":1072.1000001430511,"secureConnectionStart":862.2000000476837},{"duration":256.89999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&slack-enabled=true&whisper-enabled=true","startTime":1144.6000001430511,"connectEnd":1144.6000001430511,"connectStart":1144.6000001430511,"domainLookupEnd":1144.6000001430511,"domainLookupStart":1144.6000001430511,"fetchStart":1144.6000001430511,"redirectEnd":0,"redirectStart":0,"requestStart":1144.6000001430511,"responseEnd":1401.5,"responseStart":1401.5,"secureConnectionStart":1144.6000001430511}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":105,"responseStart":305,"responseEnd":310,"domLoading":308,"domInteractive":1407,"domContentLoadedEventStart":1407,"domContentLoadedEventEnd":1454,"domComplete":1822,"loadEventStart":1822,"loadEventEnd":1823,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1377.2000000476837},{"name":"bigPipe.sidebar-id.end","time":1378.1000001430511},{"name":"bigPipe.activity-panel-pipe-id.start","time":1378.2999999523163},{"name":"bigPipe.activity-panel-pipe-id.end","time":1381.5},{"name":"activityTabFullyLoaded","time":1471.9000000953674}],"measures":[],"correlationId":"6a716c974b239d","effectiveType":"4g","downlink":9,"rtt":0,"serverDuration":130,"dbReadsTimeInMs":23,"dbConnsTimeInMs":32,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Can apply to upgrades from MySQL <= 5.7 too.
Some postinst script that detects config settings that write to /home and others (includes
MDEV-10399)and drop like adding an extra file like:
https://mariadb.com/kb/en/systemd/#configuring-access-to-home-directories
Consider ProtectSystem directories, probably with a warning.