Mysql socket security (Was: Re: i found something ugly about freeBSD)

From: Melvyn Sopacua (freebsd-questions_at_webteckies.org)
Date: 01/31/04

  • Next message: Eric F Crist: "Re: where am I supposed to put my rc.firewall?"
    To: freebsd-questions@FreeBSD.org
    Date: Sat, 31 Jan 2004 02:12:56 +0100
    
    
    

    On Friday 30 January 2004 10:20, Jorn Argelo wrote:

    > It's up to the administrator of the server to make sure that users
    > can't reach the /tmp partition then.

    Ehm, you really don't want to advise this.

    A proper solution:

    /etc/my.cnf:
    [mysqld]
    socket = /var/run/mysql/socket

    Then:
    mkdir /var/run/mysql
    chown mysql:staff /var/run/mysql
    chmod 750 /var/run/mysql

    This assumes users in group staff are allowed to access mysql. DO NOT use the
    mysql group - that is best left with only the mysql user in it.

    -- 
    Melvyn
    =======================================================
    FreeBSD sarevok.webteckies.org 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Wed Jan 28 
    18:01:18 CET 2004     
    root@sarevok.lan.webteckies.org:/usr/obj/usr/src/sys/SAREVOK_NOAPM_NODEBUG  
    i386
    =======================================================
    
    



  • Next message: Eric F Crist: "Re: where am I supposed to put my rc.firewall?"

    Relevant Pages

    • Re: Users question...
      ... I mean, I running MySQL as mysql user, but when I want ... > member of wheel and assigned permissions in the current database directory ... UNIX accounts in wheel - just create a MySQL user account with the ...
      (freebsd-questions)
    • Re: Fwd: Cron run-parts /etc/cron.daily
      ... Can't connect to the database. ... It needs to log in to the mysql database. ... It's probably talking about a mysql user named mysql. ... which I think its reading because the message changed a bit when I did set ...
      (Fedora)
    • Re: mysql user
      ... A mysql user will be created if you install mysql from ... Even if you are strange enough to decide not to use ports, ...
      (freebsd-questions)
    • Re: Connecting LabView with MySQL
      ... exception for 127.0.0.1 aka localhost. ... Maybe entering localhost as server name (if your MySQL server is on the ... but the proper solution is to ...
      (comp.lang.labview)
    • Re: permissions dilemma
      ... informed that the screen saver daemon wasn't running. ... I tried installing MySQL twice, each time with the same problem. ... mysql user needed to run mysqld. ...
      (freebsd-questions)