Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-5303

rpm post-inst scriptlet creates mysql user with a valid shell

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 5.5.33a
    • 5.5.35
    • None
    • None

    Description

      rpm post-inst scriptlet creates mysql user with a valid shell.

      This is completely unnecessary and poses extra security risk. mysql account should use /sbin/nologin instead

      Attachments

        Activity

          serg Sergei Golubchik created issue -
          serg Sergei Golubchik made changes -
          Field Original Value New Value
          Status Open [ 1 ] In Progress [ 3 ]
          serg Sergei Golubchik made changes -
          Fix Version/s 5.5.35 [ 14000 ]
          Fix Version/s 5.5.34 [ 13700 ]
          serg Sergei Golubchik made changes -
          Resolution Fixed [ 1 ]
          Status In Progress [ 3 ] Closed [ 6 ]
          dbart Daniel Bartholomew added a comment - http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/3995
          serg Sergei Golubchik made changes -
          Workflow defaullt [ 29732 ] MariaDB v2 [ 43721 ]
          ratzpo Rasmus Johansson (Inactive) made changes -
          Workflow MariaDB v2 [ 43721 ] MariaDB v3 [ 62890 ]
          serg Sergei Golubchik made changes -
          Workflow MariaDB v3 [ 62890 ] MariaDB v4 [ 147239 ]

          People

            serg Sergei Golubchik
            serg Sergei Golubchik
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.