RE: The Security of MySQL

2003-02-28 Thread Dyego Souza do Carmo
Respondendo, quinta-feira, 27 de fevereiro de 2003, 13:32:39, Mensagem Original: AN> Are you using Windows? If so, this root/mysql user talk will be AN> meaningless. You can still make the directory secure and only touchable AN> by the user that mysql is running as. Is this what you need? nope

RE: The Security of MySQL

2003-02-27 Thread Adam Nelson
> Sent: Wednesday, February 26, 2003 12:13 PM > To: [EMAIL PROTECTED] > Subject: The Security of MySQL > > > > > I'm using MySQL-Pro+InnoDB 4.0.11 and i have a BIG problem... > My users is "hacking the database" because the MySQL system tables are > sto

Re: The Security of MySQL

2003-02-27 Thread Fred van Engen
Hi Dyego, On Wed, Feb 26, 2003 at 04:04:36PM -0300, Dyego Souza do Carmo wrote: > MM> You should use the filesystem security your operating system provides to > MM> prevent common users from copying the database files. The directory that > MM> the database files resides in only needs to allow acc

RE: Re[2]: The Security of MySQL

2003-02-26 Thread John Griffin
, February 26, 2003 1:58 PM To: Jeremy Tinley Cc: [EMAIL PROTECTED] Subject: Re[2]: The Security of MySQL Respondendo, quarta-feira, 26 de fevereiro de 2003, 14:46:45, Mensagem Original: JT> Why does a user on your system have access to rename the database? Your JT> database files sho

Re: The Security of MySQL

2003-02-26 Thread gerald_clark
I your customers have root access to their machine, then there is no security, nor can there be. Dyego Souza do Carmo wrote: MM> You should use the filesystem security your operating system provides to MM> prevent common users from copying the database files. The directory that MM> the database

Re: The Security of MySQL

2003-02-26 Thread Dyego Souza do Carmo
MM> You should use the filesystem security your operating system provides to MM> prevent common users from copying the database files. The directory that MM> the database files resides in only needs to allow access by the user MM> that the MySQL server is running as. If you do this, only users wh

Re[2]: The Security of MySQL

2003-02-26 Thread Dyego Souza do Carmo
( JT> IN CLEAR TEXT) and this is terrible for me ! JT> Exists the PASSWORD on CREATE TABLE STATEMENT but i'm using and is JT> same without the clause. JT> Please MySQL-Team and users... The security of MySQL is to

Re: The Security of MySQL

2003-02-26 Thread gerald_clark
nd DECODE print a "password" in log file ( IN CLEAR TEXT) and this is terrible for me ! Exists the PASSWORD on CREATE TABLE STATEMENT but i'm using and is same without the clause. Please MySQL-Team and users... The security of MySQL is too simple ? only rename and the database i

Re: The Security of MySQL

2003-02-26 Thread Manuel Kiessling
Dyego Souza do Carmo wrote: Tanks Tanks very much uh, we have war already?? (sorry couldn't resist) -- Manuel Kiessling sql,query,innodb,mysql - Before posting, please check: http://www.mysql.com/manual.php

RE: The Security of MySQL

2003-02-26 Thread John Griffin
] Subject: The Security of MySQL I'm using MySQL-Pro+InnoDB 4.0.11 and i have a BIG problem... My users is "hacking the database" because the MySQL system tables are stored in .MYD format and to "hack database" is simple , only rename the database and "copy" the

Re: The Security of MySQL

2003-02-26 Thread Mark Matthews
s is terrible for me ! Exists the PASSWORD on CREATE TABLE STATEMENT but i'm using and is same without the clause. Please MySQL-Team and users... The security of MySQL is too simple ? only rename and the database is "opened for world" ? please help in advance ;) You should use the fi

The Security of MySQL

2003-02-26 Thread Dyego Souza do Carmo
but i'm using and is same without the clause. Please MySQL-Team and users... The security of MySQL is too simple ? only rename and the database is "opened for world" ? please help in advance ;) Ta