Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39480

sysusers.d: lock mysql service account and make it non-login

    XMLWordPrintable

Details

    Description

      MariaDB currently creates the @MYSQLD_USER@ sysusers entry like this:

      u @MYSQLD_USER@ - "MariaDB" @MYSQL_DATADIR@

      This leaves the datadir as the account home and does not make it explicit that the account is locked/non-login.

      For a service user, it is clearer to define it as a locked account with no usable home or shell:

      u! @MYSQLD_USER@ - "MariaDB Server" /nonexistent /bin/false

      This makes the mysql account clearly service-only, avoids using the datadir as a login home, and matches the usual convention for non-interactive system users.

      Attachments

        Activity

          People

            danblack Daniel Black
            aquila Aquila Macedo
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.