Details
-
Task
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
-
None
Description
The documentation for the information_schema.DISKS table says the following:
This plugin does not check user privileges. When it is enabled, any user can query the INFORMATION_SCHEMA.DISKS table and see all the information it provides.
https://mariadb.com/kb/en/library/information-schema-disks-table/
It seems like this table should be protected by some privilege. Maybe FILE and/or SUPER privileges would be appropriate?
Attachments
Issue Links
- relates to
-
MDEV-14533 Provide information_schema tables using which hardware information can be obtained.
-
- Closed
-
Activity
Transition | Time In Source Status | Execution Times |
---|
|
137d 15h 44m | 1 |
|
54m 38s | 1 |
|
21m 1s | 1 |
|
9d 22h 17m | 2 |
|
18h 2m | 1 |