[MDEV-29424] security switch on wsrep_cluster_address Created: 2022-08-31 Updated: 2023-06-06 Resolved: 2023-06-06 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Galera |
| Fix Version/s: | 10.10.1 |
| Type: | Task | Priority: | Minor |
| Reporter: | Sylvain ARBAUDIE | Assignee: | Jan Lindström |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Description |
|
could we add a new parameter that allows us to specify that only the ips listed in the gcomm address can join the actual cluster ? this is a security issue, maybe not that big but still, as of yet there is no way to prevent a rogue node to join a cluster, get all the datas through an SST and get away with it. |
| Comments |
| Comment by Jan Lindström [ 2023-06-06 ] |