----- Original Message ----- 
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, January 30, 2004 3:01 AM
Subject: i found something ugly about freeBSD


> Am probably wrong i hope.

Yes, you are. :)

> ... but mysqld creates a file call /tmp/mysql.sock,
> but this file got to be 777???

Yeah, well, that's the general idea; everybody can read/write to the mysqld
server socket: from "nobody" (web server) to root.

> ...i loging with a other user and call a rm /tmp/mysql.sock

Set the sticky bit (+t) on /tmp/, and only the owner of the mysql socket
will be able to delete it.

- Mark

_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to