On Mon, Jan 21, 2002 at 01:34:31PM -0800, Chris Francy wrote: > > There is at least one package in Debian that requires you to put sensitive > information in /root. The mysql server package needs you to have a .my.cnf > in the /root if you want the logs to rotate. The my.cnf contains the clear > text version of the root password to the database.
<snip> > I have changed /root to 0700 on all my installations because I am running > mysql server. It hasn't broken anything. Is there any reason you can't just chmod 0600 /root/.my.cnf, in that case? Clearly there are individual files that you don't want world-readable, but that's true for normal users' home dirs as well. noah -- _______________________________________________________ | Web: http://web.morgul.net/~frodo/ | PGP Public Key: http://web.morgul.net/~frodo/mail.html
msg05454/pgp00000.pgp
Description: PGP signature
