[MDEV-41145] datadir is world readable and executable - Jira

XML

Word

Printable

Details

Type: Bug
Status: Open (View Workflow)
Priority: Major
Resolution: Unresolved
Affects Version/s: 10.6(EOL), 10.11, 11.4, 11.8, 12.3
Fix Version/s: 11.4, 11.8, 12.3
Component/s: Platform Debian, Platform RedHat
Labels:
None

Description

at least on Debian and RHEL /var/lib/mysql is 0755 (rwxr-xr-x), so world readable and executable, meaning anyone with shell access can see all schema names. Which might be an issue on shared hosting that provides shell access. And 0700 (rwx------) would be a more prudent setting.

On the other hand, as it's that way basically everywhere, there might be tools relying on it.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Sergei Golubchik

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 2026-09-15 16:19

Updated:: 2026-09-15 16:23

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.