[Bug 293258] Re: mysql user has home directory writable by mysqld
This bug was fixed in the package mysql-dfsg-5.1 - 5.1.43-1ubuntu2 --- mysql-dfsg-5.1 (5.1.43-1ubuntu2) maverick; urgency=low [Marc Deslauriers] * debian/mysql-server-5.0.preinst: Set mysql user's home directory to /nonexistent to protect against having the /var/lib/mysql user-writeable. If an attacker can trick mysqld into creating dot files in the home directory, he could do .rhost-like attacks on the system. (LP: #293258) [Chuck Short] * debian/mysql-server-5.1.mysql.upstart: Dont wait forever for a ping from the mysql server. It might not be configured properly. (LP: #551097) -- Chuck ShortThu, 20 May 2010 15:35:48 -0400 ** Changed in: mysql-dfsg-5.1 (Ubuntu) Status: Confirmed => Fix Released -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
** Package changed: mysql-dfsg-5.0 (Ubuntu) => mysql-dfsg-5.1 (Ubuntu) -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.1 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
** Changed in: mysql-dfsg-5.0 (Ubuntu) Importance: Undecided => Medium -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
** Changed in: mysql-dfsg-5.0 (Ubuntu) Status: Incomplete => Confirmed -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
I can confirm that the writable data directory (/var/lib/mysql) is also the default mysql system home directory in at least Hardy (mysql-server 5.0.51a-3ubuntu5.4), Intrepid (mysql-server 5.0.67-0ubuntu6) and Jaunty (mysql-server 5.1.30really5.0.75-0ubuntu8). -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
intrepid, seems to be same in lenny, hardy, etc. -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
Which version are you using? Regards chuck ** Changed in: mysql-dfsg-5.0 (Ubuntu) Status: New => Incomplete -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
resetting back to new, maybe I failed something ** Changed in: mysql-dfsg-5.0 (Ubuntu) Status: Confirmed => New -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 293258] Re: mysql user has home directory writable by mysqld
** Visibility changed to: Public ** Changed in: mysql-dfsg-5.0 (Ubuntu) Status: New => Confirmed -- mysql user has home directory writable by mysqld https://bugs.launchpad.net/bugs/293258 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-dfsg-5.0 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
