[MDEV-5303] rpm post-inst scriptlet creates mysql user with a valid shell Created: 2013-11-16 Updated: 2014-01-29 Resolved: 2013-12-12 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | None |
| Affects Version/s: | 5.5.33a |
| Fix Version/s: | 5.5.35 |
| Type: | Bug | Priority: | Major |
| Reporter: | Sergei Golubchik | Assignee: | Sergei Golubchik |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Description |
|
rpm post-inst scriptlet creates mysql user with a valid shell. This is completely unnecessary and poses extra security risk. mysql account should use /sbin/nologin instead |
| Comments |
| Comment by Daniel Bartholomew [ 2014-01-29 ] |
|
http://bazaar.launchpad.net/~maria-captains/maria/5.5/revision/3995 |