Re: INTO OUTFILE "filename" creates world writeable files

Re: INTO OUTFILE "filename" creates world writeable files

am 09.07.2003 21:03:50 von Neil Walker

Dear Sinisa

thanks for your reply.

>> OK, that is understood. The server is called, and it wants to buffer
>> via a socket with wide open permissions? Is this a platform-specific
>> bind issue?
>>
>> Yours
>> Neil
>
>
>This is platform dependent and Sun should fix it, as this is not SysV
>compatible.

I'll check this on Linux.

If it behaves as I would like (i.e. creating a file if it has
permissions to do so and not requiring world-write directories), I'm
happy to take this to Sun.

If not, then this splits:

* the bug is that the file should /not/ be deleted if the new file is
not to be written - i.e. perms should be checked first and reported
if in error

* there is a RFE too - it is not sensible to suggest anyone makes a
777 directory

Yours
Neil
------------------------------------------------------------ ---------
Neil Walker email: neil.walker@cimr.cam.ac.uk
JDRF/WT Diabetes and Inflammation tel: +44 (0)1223 763210
Laboratory fax: +44 (0)1223 762102
Cambridge, UK http://www-gene.cimr.cam.ac.uk/todd/
------------------------------------------------------------ ---------


--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org

Re: INTO OUTFILE "filename" creates world writeable files

am 09.07.2003 21:19:08 von Sinisa Milivojevic

Neil Walker writes:
> Dear Sinisa
>
> thanks for your reply.
>
>
> * the bug is that the file should /not/ be deleted if the new file is
> not to be written - i.e. perms should be checked first and reported
> if in error
>

I do not think that this is a good idea, as you are doing a new
backup.

This could result in entity integrity problems.

Plus it would unnecesarily complicate things. It woudl also require
some unnecessary changes on the server side which would cause
changes in the behaviour, which many customers are used to.

Not, it is NOT a bug.

> * there is a RFE too - it is not sensible to suggest anyone makes a
> 777 directory
>
> Yours
> Neil

No, but directory must be write-able by both MySQL server and client
program.

It is a duty of sysadmin to enable this.

--

Regards,

--
For technical support contracts, go to https://order.mysql.com/?ref=msmi
__ ___ ___ ____ __
/ |/ /_ __/ __/ __ \/ / Mr. Sinisa Milivojevic
/ /|_/ / // /\ \/ /_/ / /__ MySQL AB
/_/ /_/\_, /___/\___\_\___/ Fulltime Developer and Support Coordinator
<___/ www.mysql.com Larnaca, Cyprus


--
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe: http://lists.mysql.com/bugs?unsub=gcdmb-bugs@m.gmane.org