David

I suggest you need to go back to first principles on Unix security,
applications, and Mysql users.

Firstly and Mysql user is not necessarily a Unix user and vica-versa.

The simplest way to prevent anyone being able to access a file in Unix is
simply to remove the relevant permissions from the file.

If you have Mysql running under the user mysql and you set the permissions
as 700 (rwx --- ---) on the database directories and files then only the
mysql user, which the mysqld deamon runs as has permission to access them.

If it's simply a case of protecting tables then you just need to grant the
appropriate permissions to that Mysql user. Removing update privilege means
they can't change anything, removing delete privilege means they can't
remove anything, removing insert privilege means they can't add anything,
and removing select privilege means they can't access the table.

Kevin Cowley
R&D
 
Tel: 0118 902 9099 (direct line)
Email: [EMAIL PROTECTED]
Web: http://www.alchemetrics.co.uk

-----Original Message-----
From: David Crane [mailto:[EMAIL PROTECTED] 
Sent: 11 May 2004 17:45
To: [EMAIL PROTECTED]
Subject: how do i encrypt the .frm file with a password

I need to provide some security to a database that I am working on. This
database will be distributed and I need to prevent users from being able to
simply copy the files and being able to have complete access to it. I want
to do this: "Encrypt the `.frm' file with a password. This option doesn't do
anything in the standard MySQL version. "

(http://dev.mysql.com/doc/mysql/en/CREATE_TABLE.html) I have recompiled
mysql to enable 64 indexes on a table. So, recompiling it is not a problem.
Do I need a custom version or MaxDB?



-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:
http://lists.mysql.com/[EMAIL PROTECTED]


**************************************************************************************
ALCHEMETRICS LIMITED (ALCHEMETRICS)
Mulberry Park, Fishponds Road, Wokingham, Berkshire, RG41 2GX
Tel:  +44 (0) 118 902 9000    Fax:  +44 (0) 118 902 9001
This e-mail is confidential and is intended for the use of the addressee only.
If you are not the intended recipient, you are hereby notified that you must 
not use, copy, disclose, otherwise disseminate or take any action based on 
this e-mail or any information herein.
If you receive this transmission in error, please notify the sender
immediately by reply e-mail or by using the contact details above and then
delete this e-mail.
Please note that e-mail may be susceptible to data corruption, interception 
and unauthorised amendment.  Alchemetrics does not accept any liability for 
any such corruption, interception, amendment or the consequences thereof.
**************************************************************************************


-- 
MySQL General Mailing List
For list archives: http://lists.mysql.com/mysql
To unsubscribe:    http://lists.mysql.com/[EMAIL PROTECTED]

Reply via email to