search

sous-chefs / mysql

Development repository for the mysql cookbook
https://supermarket.chef.io/cookbooks/mysql
Apache License 2.0
338 stars 690 forks source link

Execute privilege should not be allowed on my.cnf file #468

Closed geleman closed 8 years ago

geleman commented 8 years ago

Issue #461 was merged and this should be set at 0600 and not 0700. This can result in a major security flaw if the server was to be compromised and edits done to the cnf file without the user knowing. Major damage can be done a reboot if code is injected into the cnf file that can be executed.

geleman commented 8 years ago

Might also want to look at the recent security bulletin concerning this type of issue also.

coderanger commented 8 years ago

@tas50 Can this get triaged up a bit? The original PR has no explanation and this is a major issue given MySQL bugs in the wild.

geleman commented 8 years ago

This was reverted back and I am closing now. Thanks for getting this corrected

lock[bot] commented 5 years ago

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.