-
Committer:
Bazaar Package Importer
-
Author(s):
Chuck Short, Marc Deslauriers, Chuck Short
-
Date:
2010-05-20 15:35:48 UTC
-
Revision ID:
james.westby@ubuntu.com-20100520153548-62cik3r2csr6p59e
Tags: 5.1.43-1ubuntu2
[Marc Deslauriers]
* debian/mysql-server-5.0.preinst: Set mysql user's home directory
to /nonexistent to protect against having the /var/lib/mysql
user-writeable. If an attacker can trick mysqld into creating
dot files in the home directory, he could do .rhost-like attacks
on the system. (LP: #293258)
[Chuck Short]
* debian/mysql-server-5.1.mysql.upstart: Dont wait forever for a ping from
the mysql server. It might not be configured properly. (LP: #551097)