mirror of
https://github.com/MariaDB/server.git
synced 2025-01-15 19:42:28 +01:00
76a27155b4
.. even with MDEV-9095 fix CapabilityBounding sets require filesystem setcap attributes for the executable to gain privileges during execution. A side effect of this however is the getauxvec(AT_SECURE) gets set, and the secure_getenv from OpenSSL internals on OPENSSL_CONF environment variable will get ignored (openssl gh issue 21770). According to capabilities(7), Ambient capabilities don't trigger ld.so triggering the secure execution mode. Include SELinux and Apparmor capabilities for ipc_lock |
||
---|---|---|
.. | ||
dtrace | ||
MacOSX | ||
policy | ||
rpm | ||
binary-configure.sh | ||
build-tags | ||
ccfilter | ||
CMakeLists.txt | ||
compiler_warnings.supp | ||
db.opt | ||
magic | ||
mariadb.pc.in | ||
mariadb.service.in | ||
mariadb@.service.in | ||
mysql-log-rotate.sh | ||
mysql-multi.server.sh | ||
mysql.m4 | ||
mysql.server-sys5.sh | ||
mysql.server.sh | ||
mysqld_multi.server.sh | ||
sysusers.conf.in | ||
tmpfiles.conf.in | ||
use_galera_new_cluster.conf | ||
wsrep.cnf.sh | ||
wsrep_notify.sh |