[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: root's home world readable



On Mon, Jan 21, 2002 at 01:34:31PM -0800, Chris Francy wrote:
> 
> There is at least one package in Debian that requires you to put sensitive 
> information in /root.  The mysql server package needs you to have a .my.cnf 
> in the /root if you want the logs to rotate.  The my.cnf contains the clear 
> text version of the root password to the database.

<snip>

> I have changed /root to 0700 on all my installations because I am running 
> mysql server.  It hasn't broken anything.

Is there any reason you can't just chmod 0600 /root/.my.cnf, in that
case?  Clearly there are individual files that you don't want
world-readable, but that's true for normal users' home dirs as well.

noah

-- 
 _______________________________________________________
| Web: http://web.morgul.net/~frodo/
| PGP Public Key: http://web.morgul.net/~frodo/mail.html 

Attachment: pgp0PWyDWxL1e.pgp
Description: PGP signature


Reply to: