Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-41145

datadir is world readable and executable

    XMLWordPrintable

Details

    Description

      at least on Debian and RHEL /var/lib/mysql is 0755 (rwxr-xr-x), so world readable and executable, meaning anyone with shell access can see all schema names. Which might be an issue on shared hosting that provides shell access. And 0700 (rwx------) would be a more prudent setting.

      On the other hand, as it's that way basically everywhere, there might be tools relying on it.

      Attachments

        Activity

          People

            Unassigned Unassigned
            serg Sergei Golubchik
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.