Details
-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 5.5.33a
-
Fix Version/s: 5.5.35
-
Component/s: None
-
Labels:None
Description
rpm post-inst scriptlet creates mysql user with a valid shell.
This is completely unnecessary and poses extra security risk. mysql account should use /sbin/nologin instead