reassign 534258 dbconfig-common severity 534258 wishlist thanks Paul Nijjar wrote: > Subject: rsyslog-mysql: rsyslog mysql user has too many privileges > Package: rsyslog-mysql > Version: 3.18.6-4 > Severity: normal > > *** Please type your report below this line *** > > The rsyslog documentation states the following (in > /usr/share/doc/rsyslog-doc/html/rsyslog_mysql.html): > > > If you have modified the default, use your name here. Database-userid and > -password are the credentials used to connect to the database. As they are > stored in clear text in rsyslog.conf, that user should have only the least > possible privileges. It is sufficient to grant it INSERT privileges to the > systemevents table, only. >
.. > I would prefer giving INSERT privileges to this user (or another called > rsyslog_logger) and then if necessary having a saparate user which can > do selects on the database. Hi Paul, rsyslog uses dbconfig-common for configuring mysql/postgresql databases. So I think this bug should be handled within the dbconfig-common package, reassigning. Cheers, Michael -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
