diff options
author | Sergey Vojtovich <svoj@mariadb.org> | 2018-01-15 16:21:45 +0400 |
---|---|---|
committer | Sergey Vojtovich <svoj@mariadb.org> | 2018-01-15 16:21:45 +0400 |
commit | 7e3c1e02b75039fbeca5671398981a01e574b6fa (patch) | |
tree | b115c97454defbb6558201c6c14889654a5b78e6 /debian | |
parent | 1879b2b8df0c0cd84c14aa955cd370bff424fd3f (diff) | |
download | mariadb-git-7e3c1e02b75039fbeca5671398981a01e574b6fa.tar.gz |
MDEV-14796 - debian: insecure root password is only if plugin is empty
Enumerate plugins that use password field.
Diffstat (limited to 'debian')
-rw-r--r-- | debian/additions/debian-start.inc.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/debian/additions/debian-start.inc.sh b/debian/additions/debian-start.inc.sh index 1fe1950adea..08ec339bcba 100644 --- a/debian/additions/debian-start.inc.sh +++ b/debian/additions/debian-start.inc.sh @@ -65,7 +65,7 @@ function check_root_accounts() { logger -p daemon.info -i -t$0 "Checking for insecure root accounts." - ret=$( echo "SELECT count(*) FROM mysql.user WHERE user='root' and password='' and plugin='';" | $MYSQL --skip-column-names ) + ret=$( echo "SELECT count(*) FROM mysql.user WHERE user='root' and password='' and plugin in ('', 'mysql_native_password', 'mysql_old_password');" | $MYSQL --skip-column-names ) if [ "$ret" -ne "0" ]; then logger -p daemon.warn -i -t$0 "WARNING: mysql.user contains $ret root accounts without password!" fi |