Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
10.1.7
-
None
Description
There are many *-encrypt- options and they *all have to be enabled to prevent data leaks.
A possible solution could be a “meta-option” --encryption that would enable or disable all other encryption-related options.
A much simpler solution is to provide a "preset" file, lilke
/etc/my.cnf.d/enable_encryption.preset
[mariadb]
aria-encrypt-tables
encrypt-binlog
encrypt-tmp-disk-tables
encrypt-tmp-files
loose-innodb-encrypt-log
loose-innodb-encrypt-tables
and let the user !include it into his my.cnf as needed.