[Bacula-users] MySQL security

[Jeff McCune]

Might I suggest that the second line be commented out of grant_mysql_privileges for default setups:

  grant all privileges on bacula.* to [EMAIL PROTECTED];
  grant all privileges on bacula.* to ${USER}@"%";

The bacula user defaults to have no password... So it seems like a bad idea to allow an user with no password all privileges from any host.

Bacula already defaults to assuming that mysql will be running on the same host in the configuration files. I think that the benefits gained from allowing the user to connect to the catalog from anywhere do not offset the security concerns such a default setup creates.

Is this something for the bug tracker, rather than the users mailing list?

Just a thought...

Regards,
--
Jeff McCune
OSU Department of Mathematics System Support
(614) 292-4962
gpg --keyserver pgp.mit.edu --recv-key BAF3211A

signature.asc
Description: OpenPGP digital signature