Re: [d-security] Re: root's home world readable

2002-01-21 Thread Thomas Bushnell, BSG
Christian Hammers <[EMAIL PROTECTED]> writes: > The password for the mysql root user is not property of the system wide > configuration as I can't force the user to change a file in /etc > every time they change the users password and, due to mysqls default to > use the mysql user of the same name

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Christian Hammers
Hi On Mon, Jan 21, 2002 at 03:23:15PM -0800, Thomas Bushnell, BSG wrote: > If it's a way to get "the logs" to rotate, that sure sounds like a > system-wide option. If it's a root password to a system-wide > database, then that's also a system-wide option. The password for the mysql root user is

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Thomas Bushnell, BSG
Christian Hammers <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 01:46:58PM -0800, Thomas Bushnell, BSG wrote: > > > There is at least one package in Debian that requires you to put > > > sensitive information in /root. The mysql server package needs you to > > > have a .my.cnf in the /roo

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Christian Hammers
On Mon, Jan 21, 2002 at 01:46:58PM -0800, Thomas Bushnell, BSG wrote: > > There is at least one package in Debian that requires you to put > > sensitive information in /root. The mysql server package needs you to > > have a .my.cnf in the /root if you want the logs to rotate. The > > my.cnf conta

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Thomas Bushnell, BSG
Christian Hammers <[EMAIL PROTECTED]> writes: > The password for the mysql root user is not property of the system wide > configuration as I can't force the user to change a file in /etc > every time they change the users password and, due to mysqls default to > use the mysql user of the same nam

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Christian Hammers
Hi On Mon, Jan 21, 2002 at 03:23:15PM -0800, Thomas Bushnell, BSG wrote: > If it's a way to get "the logs" to rotate, that sure sounds like a > system-wide option. If it's a root password to a system-wide > database, then that's also a system-wide option. The password for the mysql root user i

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Thomas Bushnell, BSG
Christian Hammers <[EMAIL PROTECTED]> writes: > On Mon, Jan 21, 2002 at 01:46:58PM -0800, Thomas Bushnell, BSG wrote: > > > There is at least one package in Debian that requires you to put > > > sensitive information in /root. The mysql server package needs you to > > > have a .my.cnf in the /ro

Re: [d-security] Re: root's home world readable

2002-01-21 Thread Christian Hammers
On Mon, Jan 21, 2002 at 01:46:58PM -0800, Thomas Bushnell, BSG wrote: > > There is at least one package in Debian that requires you to put > > sensitive information in /root. The mysql server package needs you to > > have a .my.cnf in the /root if you want the logs to rotate. The > > my.cnf cont