mirror/mariadb
1
0
Fork 0
mirror of https://github.com/MariaDB/server.git synced 2025-04-25 16:39:55 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
mariadb/support-files
History
Exact
Daniel Black 85ecb80fa3 MDEV-36229: Remove CAP_DAC_OVERRIDE CAP_AUDIT_WRITE from AmbientCapabilities 
In resolving MDEV-33301 (76a27155b4) we
moved all the capabilities from CapabilityBoundingSet to AmbientCapabilities
where only add/moving CAP_IPC_LOCK was intended.

The effect of this is the defaulting running MariaDB HAS the capabiltiy
CAP_DAC_OVERRIDE CAP_AUDIT_WRITE allowing it to access any file,
even while running as a non-root user.

Resolve this by making CAP_IPC_LOCK apply to AmbientCapabilities and
leave the remaining CAP_DAC_OVERRIDE CAP_AUDIT_WRITE to CapabilityBoundingSet
for the use by auth_pam_tool.
2025-03-26 10:50:31 +02:00
..
dtrace Update FSF Address 2019-05-11 21:29:06 +03:00
MacOSX MDEV-22569: Run bin/mariadbd instead of bin/mysqld 2020-06-16 12:59:30 +03:00
policy MDEV-33301 memlock with systemd still not working 2024-03-27 13:36:31 +11:00
rpm MDEV-4151 Mixed MySQL/MariaDB references in RPM upgrade error message 2025-03-05 14:44:14 +02:00
binary-configure.sh MDEV-22569: Run bin/mariadbd instead of bin/mysqld 2020-06-16 12:59:30 +03:00
build-tags Merge remote-tracking branch 'origin/10.2' into bb-10.2-ext 2017-07-04 15:31:25 +04:00
ccfilter Fixed compiler warnings and test failures found by buildbot 2016-06-24 02:25:14 +03:00
CMakeLists.txt MDEV-23230 wsrep files installed when built without WSREP (#2334) 2022-11-28 18:21:03 +00:00
compiler_warnings.supp MDEV-18531 : Use WolfSSL instead of YaSSL as "bundled" SSL/encryption library 2019-05-22 13:48:25 +02:00
db.opt Added new states to be able to better diagnose where server hangs. 2014-05-03 19:12:17 +03:00
magic Fixes after review of guilhem of block record patch 2007-04-19 13:18:56 +03:00
mariadb.pc.in mariadb.pc: plugindir is used 2021-03-18 14:35:55 +11:00
mariadb.service.in MDEV-36229: Remove CAP_DAC_OVERRIDE CAP_AUDIT_WRITE from AmbientCapabilities 2025-03-26 10:50:31 +02:00
mariadb@.service.in MDEV-36229: Remove CAP_DAC_OVERRIDE CAP_AUDIT_WRITE from AmbientCapabilities 2025-03-26 10:50:31 +02:00
mysql-log-rotate.sh Merge branch '10.4' into 10.5 2022-02-01 20:33:04 +01:00
mysql-multi.server.sh MDEV-22569: Run bin/mariadbd instead of bin/mysqld 2020-06-16 12:59:30 +03:00
mysql.m4 Update FSF Address 2019-05-11 21:29:06 +03:00
mysql.server-sys5.sh MDEV-22569: Run bin/mariadbd instead of bin/mysqld 2020-06-16 12:59:30 +03:00
mysql.server.sh Merge 10.4 into 10.5 2022-06-09 12:22:55 +03:00
mysqld_multi.server.sh MDEV-14900 Upstream 10.3 debian patches 2018-08-12 11:37:42 +02:00
sysusers.conf.in Generate and install sysusers and tmpfiles configuration 2017-12-20 12:54:19 +02:00
tmpfiles.conf.in Generate and install sysusers and tmpfiles configuration 2017-12-20 12:54:19 +02:00
use_galera_new_cluster.conf systemd: mariadb@bootstrap - clear ExecStartPre and ExecStartPost 2020-09-22 15:37:44 +10:00
wsrep.cnf.sh MDEV-17428: Update wsrep_max_ws_rows and wsrep_max_ws_size values in wsrep.cnf.sh 2019-02-21 09:19:18 +02:00
wsrep_notify.sh MDEV-29814: galera_var_notify_ssl_ipv6 causes testing system to hang 2022-12-10 01:11:55 +01:00