Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-18328

Make DISKS plugin check some privilege to access information_schema.DISKS table

    XMLWordPrintable

Details

    Description

      The documentation for the information_schema.DISKS table says the following:

      This plugin does not check user privileges. When it is enabled, any user can query the INFORMATION_SCHEMA.DISKS table and see all the information it provides.

      https://mariadb.com/kb/en/library/information-schema-disks-table/

      It seems like this table should be protected by some privilege. Maybe FILE and/or SUPER privileges would be appropriate?

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. MDEV-14533 Provide information_schema tables using which hardware information can be obtained.

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              sanja Oleksandr Byelkin
              GeoffMontee Geoff Montee (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.