Package: mysql-server-5.0
Version: 5.0.22-3

every time i do "/etc/init.d/mysql start" or restart it runs the 
mysql_upgrade script... and even if the database has already been upgraded 
it always runs this:

mysql_fix_privilege_tables --silent --user=$user --password=$password

which of course exposes the password of the debian-sys-maint user for 
anyone to sniff out of /proc.

shouldn't this use --defaults-file=/etc/mysql/debian.cnf to avoid exposing 
the password?

similar issue when invoking mysqlcheck during the upgrade.

-dean


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to