[MDEV-17178] plugin_maturity cannot be set dynamic Created: 2018-09-12  Updated: 2018-09-19  Resolved: 2018-09-19

Status: Closed
Project: MariaDB Server
Component/s: Plugins, Server
Fix Version/s: N/A

Type: Task Priority: Minor
Reporter: Oli Sennhauser Assignee: Sergei Golubchik
Resolution: Not a Bug Votes: 0
Labels: None


 Description   

Plugin Maturity variable (plugin_maturity) cannot be set dynamically (as documented).

SQL> set session plugin_maturity=beta;
ERROR 1238 (HY000): Variable 'plugin_maturity' is a read only variable
SQL> set global plugin_maturity=beta;
ERROR 1238 (HY000): Variable 'plugin_maturity' is a read only variable

This is very inconvenient and does not follow the approach of "everything can be configured online".



 Comments   
Comment by Sergei Golubchik [ 2018-09-19 ]

This is quite intentional and it's done to clearly separate areas of responsibility.

There is someone with OS level access, this someone can copy new plugins into plugin-dir and can edit my.cnf or restart mysqld with different command-line options. This someone has the necessary level of access to decide what code is executed within the mysqld process. This someone can even replace mysqld binary, if desired.

And there is another person with DB-level access, that can connect to the running mysqld, but doesn't have a (privileged) shell access. This person should not be able to load plugins that were not allowed by the first someone. Crossing this boundary, going from DB-level to OS-level is a security violation.

Generated at Thu Feb 08 08:34:30 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.