summaryrefslogtreecommitdiff
path: root/scripts/mysqlaccess.sh
Commit message (Collapse)AuthorAgeFilesLines
* Merge 10.1 into 10.2Marko Mäkelä2019-10-251-1/+1
|\
| * Merge branch 'github/5.5' into 10.1Sergei Golubchik2019-10-231-1/+1
| |\
| | * MDEV-9546 mysqlaccess script shows an old version (which was vulnerable to ↵Sergei Golubchik2019-10-191-1/+1
| | | | | | | | | | | | | | | | | | CVE-2005-0004) update mysqlaccess version
* | | Merge 10.1 into 10.2Marko Mäkelä2019-05-131-1/+1
|\ \ \ | |/ /
| * | Merge branch '5.5' into 10.1Vicențiu Ciorbaru2019-05-111-1/+1
| |\ \ | | |/
| | * Update FSF AddressVicențiu Ciorbaru2019-05-111-1/+1
| | | | | | | | | | | | * Update wrong zip-code
* | | Merge branch '10.1' into 10.2Sergei Golubchik2017-08-171-6/+13
|\ \ \ | |/ /
| * | Merge branch '10.0' into 10.1Sergei Golubchik2017-08-081-6/+13
| |\ \
| | * \ Merge remote-tracking branch 'origin/5.5' into 10.0Vicențiu Ciorbaru2017-07-251-6/+13
| | |\ \ | | | |/
| | | * Merge remote-tracking branch 'mysql/5.5' into 5.5Sergei Golubchik2017-07-181-6/+13
| | | |\
| | | | * Bug#25043674 - MYSQLACCESS SCRIPT LOADS AND EXECUTES CODEShishir Jaiswal2017-04-171-4/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | FROM THE CURRENT DIRECTORY DESCRIPTION =========== When 'mysqlaccess' tool is run, it reads (and executes) the content of its configuration file 'mysqlaccess.conf' from the current directory. This is not a recommended behaviour as someone with ill intentions can insert malicious instructions into this file which could be executed whenever this tool is run. ANALYSIS ======== The configuration file is presently looked for, in the following folders (in given order): 1. Current directory 2. SYSCONFDIR //This gets expanded 3. /etc/ Owing to the reasons mentioned above, we should not permit the file to be in the current directory. Since the other two folders are assumed to be accessible only to authorized people, the config file is safe to be read from there. FIX === Modified the script so that it looks for the config file now in the following two folders (in the given order): 1. SYSCONFDIR 2. /etc/ If it's absent from above locations but present in current directory, an error is thrown asking the user to move the file to one of the above locations and retry. NOTE ==== The location paths and their precedence are not documented for this tool. It needs to be noted as part of the associated documentation.
| | | | * BUG#25719975 SHEBANG HARD CODED AS /USR/BIN/PERL IN SCRIPTS, BREAKS ON FREEBSDTerje Rosten2017-03-281-2/+2
| | | | | | | | | | | | | | | | | | | | Use cmake variable to adjust shebang to platform.
| | | | * Updated/added copyright headersMurthy Narkedimilli2014-01-061-2/+1
| | | | |
| | | | * Bug#29716 : Bug#11746921 : MYSQL_INSTALL_DB REFERS TO THE (OBSOLETE) ↵Kent Boortz2013-12-141-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MYSQLBUG SCRIPT DURING INSTALLATION Bug#68742 : Bug#16530527 : OBSOLETE BUGREPORT ADDRESSES
| | | | * Updated/added copyright headersKent Boortz2011-06-301-3/+4
| | | | |
| | | | * - Added/updated copyright headersKent Boortz2010-12-281-0/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Removed files specific to compiling on OS/2 - Removed files specific to SCO Unix packaging - Removed "libmysqld/copyright", text is included in documentation - Removed LaTeX headers for NDB Doxygen documentation - Removed obsolete NDB files - Removed "mkisofs" binaries - Removed the "cvs2cl.pl" script - Changed a few GPL texts to use "program" instead of "library"
| | | | * Use /usr/bin/perl as standard Perl install path (bug#44643)Kent Boortz2009-05-091-1/+1
| | | | |
| | | | * BUG#24780 workaround for broken installations that depend on using /etc, but ↵df@kahlann.erinye.com2007-01-091-0/+4
| | | | | | | | | | | | | | | | | | | | were configured differently
| | | | * BUG#24780 use --sysconfdir in scriptsdf@kahlann.erinye.com2006-12-071-3/+3
| | | | |
| | | | * Merge serg.mylan:/usr/home/serg/Abk/mysql-4.0serg@serg.mylan2005-01-131-26/+13
| | | | |\ | | | | | | | | | | | | | | | | | | into serg.mylan:/usr/home/serg/Abk/mysql-4.1
| | | | | * Symlink vulnerability fixed.serg@serg.mylan2005-01-121-26/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reported by Javier Fernandez-Sanguino Pena and Debian Security Audit Team (http://www.debian.org/security/audit)
| | | | * | Fix to get correct metadata when using temporary tables to create result. ↵monty@mysql.com2004-03-301-2/+1
| | | | |/ | | | | | | | | | | | | | | | (Bug #2654)
| | | | * - Rephrased two option help texts to not start with "use the ..." as this lenz@mysql.com2003-11-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | confuses RPM's Perl module dependency checking (it adds a bogus requirement to "Perl(the)", as "use" is a Perl keyword). (BUG#1931)
| | | | * - Yves mail address does not seem to be valid anymore - changed maillenz@mysql.com2003-02-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | address to report bugs to bugs@mysql.com (thanks to Christian Hammers for pointing this out) - please merge this into all other trees!
| | | | * - Applied various patches provided by Christian Hammers (MySQL maintainerlenz@mysql.com2002-12-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | for the Debian project) to fix some architecture-specific problems and some bugs
| | | | * New benchmark testmonty@donna.mysql.com2000-12-241-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixed bug in REPLACE with BDB tables Prepare for write lock on read for BDB Inform the handler when we want to use IGNORE / REPLACE New manual pages
| | | | * configure fixesmonty@donna.mysql.com2000-09-141-0/+0
| | | | |
| | | | * Import changesetbk@work.mysql.com2000-07-311-0/+3248
| | | |
* | | | General spell fixing in comments and stringsOtto Kekäläinen2016-06-081-1/+1
|/ / /
* | | Merge branch '10.0' into 10.1Sergei Golubchik2016-03-211-9/+9
|\ \ \ | |/ /
| * | Update AskMonty and Atlassian references to MariaDBiangilfillan2016-03-081-2/+2
| | |
| * | Fix spelling: occurred, execute, which etcOtto Kekäläinen2016-03-041-7/+7
| | |
* | | Merge 10.0.14 into 10.1Sergei Golubchik2014-10-151-6/+6
|\ \ \ | |/ /
| * | MDEV-6485 Hard-coded paths in the source cannot be opt-outSergei Golubchik2014-08-031-6/+6
| |/ | | | | | | | | when looking for my.cnf files: if DEFAULT_SYSCONFDIR (or INSTALL_SYSCONFDIR) is specified (for rpms it always is), use that instead of hardcoded /etc path.
* | Change MySQL -> MariaDB inc scriptsMonty2014-08-091-3/+3
|/
* MySQL-5.5.36 mergeSergei Golubchik2014-02-171-4/+3
|\ | | | | | | (without few incorrect bugfixes and with 1250 files where only a copyright year was changed)
| * Updated/added copyright headersMurthy Narkedimilli2014-01-061-2/+1
| |
| * Bug#29716 : Bug#11746921 : MYSQL_INSTALL_DB REFERS TO THE (OBSOLETE) ↵Kent Boortz2013-12-141-2/+2
| | | | | | | | | | | | | | | | MYSQLBUG SCRIPT DURING INSTALLATION Bug#68742 : Bug#16530527 : OBSOLETE BUGREPORT ADDRESSES
* | Buildbot fixes and cleanups:Michael Widenius2013-01-111-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Added --verbose to BUILD scripts to get make to write out compile commands. - Detect if AM_EXTRA_MAKEFLAGS=VERBOSE=1 was used with build scripts. - Don't write warnings about replication variables when doing bootstrap. - Fixed that mysql_cond_wait() and mysql_cond_timedwait() will report original source file in case of errors. - Ignore some compiler warnings BUILD/FINISH.sh: Detect if AM_EXTRA_MAKEFLAGS=VERBOSE=1 or --verbose was used BUILD/SETUP.sh: Added --verbose to print out the full compile lines Updated help message client/mysqltest.cc: Fixed that one can use 'replace' with cat_file cmake/configure.pl: If --verbose is used, get make to write out compile commands debian/dist/Debian/rules: Added $AM_EXTRA_MAKEFLAGS to get VERBOSE=1 on buildbot builds debian/dist/Ubuntu/rules: Added $AM_EXTRA_MAKEFLAGS to get VERBOSE=1 on buildbot builds include/my_pthread.h: Made set_timespec_time_nsec() more portable. include/mysql/psi/mysql_thread.h: Fixed that mysql_cond_wait() and mysql_cond_timedwait() will report original source file in case of errors. mysql-test/suite/innodb/r/auto_increment_dup.result: Fixed wrong DBUG_SYNC mysql-test/suite/innodb/t/auto_increment_dup.test: Fixed wrong DBUG_SYNC mysql-test/suite/perfschema/include/upgrade_check.inc: Make test more portable for changes in *.sql files mysql-test/suite/perfschema/r/pfs_upgrade.result: Updated test results mysql-test/valgrind.supp: Ignore running Aria checkpoint thread scripts/mysqlaccess.sh: Changed reference of bugs database Ensure that also client-server group is read. sql/handler.cc: Added missing syncpoint sql/mysqld.cc: Don't write warnings about replication variables when doing bootstrap sql/mysqld.h: Don't write warnings about replication variables when doing bootstrap sql/rpl_rli.cc: Don't write warnings about replication variables when doing bootstrap sql/sql_insert.cc: Don't mask SERVER_SHUTDOWN in insert_delayed This is done to be able to distingush between shutdown and interrupt errors support-files/compiler_warnings.supp: Ignore some compiler warnings in xtradb,innobase, oqgraph, yassl, string3.h
* | Removed extra '+' from some lines (remains of old merge)Michael Widenius2012-12-141-4/+4
|/
* Updated/added copyright headersKent Boortz2011-06-301-3/+4
|
* - Added/updated copyright headersKent Boortz2010-12-281-0/+18
| | | | | | | | | | | | - Removed files specific to compiling on OS/2 - Removed files specific to SCO Unix packaging - Removed "libmysqld/copyright", text is included in documentation - Removed LaTeX headers for NDB Doxygen documentation - Removed obsolete NDB files - Removed "mkisofs" binaries - Removed the "cvs2cl.pl" script - Changed a few GPL texts to use "program" instead of "library"
* Use /usr/bin/perl as standard Perl install path (bug#44643)Kent Boortz2009-05-091-1/+1
|
* BUG#24780 workaround for broken installations that depend on using /etc, but ↵unknown2007-01-091-0/+4
| | | | | | | | | were configured differently scripts/mysqlaccess.sh: also look in /etc scripts/mysqld_multi.sh: also look in /etc
* BUG#24780 use --sysconfdir in scriptsunknown2006-12-071-3/+3
| | | | | | | | | scripts/Makefile.am: pass --sysconfdir to scripts scripts/mysqlaccess.sh: use --sysconfdir instead of hardcoded /etc scripts/mysqld_multi.sh: use --sysconfdir instead of hardcoded /etc
* Merge serg.mylan:/usr/home/serg/Abk/mysql-4.0unknown2005-01-131-26/+13
|\ | | | | | | | | | | | | | | into serg.mylan:/usr/home/serg/Abk/mysql-4.1 scripts/mysqlaccess.sh: Auto merged
| * Symlink vulnerability fixed.unknown2005-01-121-26/+13
| | | | | | | | | | | | | | | | reported by Javier Fernandez-Sanguino Pena and Debian Security Audit Team (http://www.debian.org/security/audit)
* | Fix to get correct metadata when using temporary tables to create result. ↵unknown2004-03-301-2/+1
|/ | | | | | | | | | | | | | | | | (Bug #2654) client/mysqltest.c: Added support for --enable_metadata mysql-test/t/order_by.test: Improved comment scripts/mysqlaccess.sh: CGI is required (Bug #2988) sql/field.cc: Fix to get correct metadata when using temporary tables to create result sql/field.h: Fix to get correct metadata when using temporary tables to create result sql/sql_insert.cc: Fix to get correct metadata when using temporary tables to create result
* - Rephrased two option help texts to not start with "use the ..." as this unknown2003-11-241-1/+1
| | | | | | | | | | | | | | | confuses RPM's Perl module dependency checking (it adds a bogus requirement to "Perl(the)", as "use" is a Perl keyword). (BUG#1931) scripts/mysqlaccess.sh: - Rephrased option help text so it does not start with "use" as this confuses RPM's Perl module dependency checking (it adds a bogus requirement to "Perl(the)", as "use" is a Perl keyword). (BUG#1931) sql-bench/bench-init.pl.sh: - Rephrased option help text so it does not start with "use" as this confuses RPM's Perl module dependency checking (it adds a bogus requirement to "Perl(the)", as "use" is a Perl keyword). (BUG#1931)
* - Yves mail address does not seem to be valid anymore - changed mailunknown2003-02-051-2/+2
| | | | | | | | | | | address to report bugs to bugs@mysql.com (thanks to Christian Hammers for pointing this out) - please merge this into all other trees! scripts/mysqlaccess.sh: - Yves mail address does not seem to be valid anymore - changed mail address to report bugs to bugs@mysql.com (thanks to Christian Hammers for pointing this out)
View Lorry Controller Status