Package: bacula-director-mysql
Version: 1.36.2-2sarge1
Severity: important
Tags: patch

Because of the technique used for quoting passwords, commands using
$MYSQL_PSWD_STRING must be eval-ed. The command in the postinst script
that grants privileges on tables to the appropriate users does not use
eval.

The attached patch fixes this.

-davidc

 

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8-1-386
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages bacula-director-mysql depends on:
ii  bacula-common             1.36.2-2sarge1 Network backup, recovery and verif
ii  bacula-director-common    1.36.2-2sarge1 Network backup, recovery and verif
ii  debconf                   1.4.30.13      Debian configuration management sy
ii  libc6                     2.3.2.ds1-22   GNU C Library: Shared libraries an
ii  libgcc1                   1:3.4.3-13     GCC support library
ii  libmysqlclient14          4.1.11a-4      mysql database client library
ii  libssl0.9.7               0.9.7e-3       SSL shared libraries
ii  libstdc++5                1:3.3.5-13     The GNU Standard C++ Library v3
ii  libwrap0                  7.6.dbs-8      Wietse Venema's TCP wrappers libra
ii  mysql-client              4.0.24-10      mysql database client binaries
ii  zlib1g                    1:1.2.2-4      compression library - runtime

-- debconf information:
* bacula-director-mysql/db_host: localhost
* bacula-director-mysql/remove_catalog_on_purge: false
* bacula-director-mysql/create_tables: true
* bacula-director-mysql/mysql_root_username: root
* bacula-director-mysql/db_user: bacula
*** orig        2005-06-07 09:04:32.699854997 -0400
--- /var/lib/dpkg/info/bacula-director-mysql.postinst   2005-06-07 
09:28:42.227912436 -0400
***************
*** 113,119 ****
  
                echo -e "GRANT ALL privileges ON $CATALOG.* TO [EMAIL 
PROTECTED] " \
                        "$MYSQL_USER_PSWD_STRING;\nFLUSH PRIVILEGES;" \
!                       | $MYSQL -h $MYSQL_HOST -u $MYSQL_ROOT_USER 
$MYSQL_PSWD_STRING mysql
  
        fi # bacula-director-mysql/create_tables == "true"
  
--- 113,120 ----
  
                echo -e "GRANT ALL privileges ON $CATALOG.* TO [EMAIL 
PROTECTED] " \
                        "$MYSQL_USER_PSWD_STRING;\nFLUSH PRIVILEGES;" \
!                       | eval $MYSQL -h $MYSQL_HOST -u $MYSQL_ROOT_USER 
$MYSQL_PSWD_STRING mysql
!     
  
        fi # bacula-director-mysql/create_tables == "true"
  

Reply via email to