Hi Sean,
Do you think it would be possible to give the user an install time option as to whether tcp is disabled or not? And if the user needed to change it, he could dpkg-reconfigure mysql-server, and move on. Just an idea, anyway.
James
sean finney wrote:
hi james, currently, the default mysql server installation only allows tcp/ip connections on the loopback address. it is our opinion that this doesn't constitute any lowering of security, because there are no users capable of connecting to localhost:3306 that aren't also capable of connecting to the local socket.
the reason why it was enabled (it used to be disabled by default) was because there are some applications which are unfortunately unable to speak to the server on the socket and can only speak via tcp/ip. since as i mentioned this isn't really a change in the level of security, i think it therefore made sense to enable networking on the loopback address by default. keep in mind that you always have the option to disable it.
so, if this explanation suffices, would you agree to closing this bug?
sean
-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
