search

City-of-Bloomington / uReport

Issue tracking and constituent relationship management system with an Open311 (GeoReport v2) endpoint designed for local governments
https://bloomington.in.gov/crm
GNU Affero General Public License v3.0
41 stars 29 forks source link

Backup cron script should use defaults-extra-file #46

Closed inghamn closed 11 years ago

inghamn commented 11 years ago

Because the mysqldump shows up in the process list, an intruder could watch the processes while our crons run, and steal our database passwords. We should put the username and password into a MySQL defaults file and point to it in the command line that's run.

mysqldump --defaults-extra-file=/path/to/file.cnf --opt $DBNAME > $BACKUPFILE

inghamn commented 11 years ago

Make sure write documentation to tell folks to chmod go-rwx these cron scripts and cnf files. Just to be safe

inghamn commented 11 years ago

Fixed in d9258b0ae8ee0fe26c08210721b20e4dbc781a97