Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-10 Thread Warren Young
On 1/9/2014 03:50, John Doe wrote: Default MySQL installation on CentOS sets /bin/bash as shell. I'm on a user cleanup task where I want reduce unneeded privileges to users. Its password should be locked. I just tested here on an EL6 VM that didn't have mysql-server on it before: #

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-10 Thread Warren Young
On 1/10/2014 12:14, Reindl Harald wrote: Am 10.01.2014 20:11, schrieb Warren Young: I just tested here on an EL6 VM that didn't have mysql-server on it before: # grep mysql /etc/shadow mysql:!!:16079:: in the config file where the users shell is defined you may find more

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-10 Thread Warren Young
On 1/10/2014 13:09, Reindl Harald wrote: i know that but the question is still WHY I don't think there is a good reason. Someone made a mistake. File a bug report upstream. I've now downloaded and examined the .src.rpm for every 6.x point release plus that for 5.10, and they all do this.

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-10 Thread Warren Young
On 1/10/2014 00:40, Luigi Rosa wrote: I checked in my CentOS 6 installations. Only one (the latest) has this issue, so it could be something added/modified in the lastest months. I don't see how that can be. I've checked the spec file in the mysql.src.rpm for every 6.x point release from

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-10 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Warren Young said the following on 10/01/2014 21:41: I have one from March 2013, and it *does* have /bin/bash as user mysql's shell. The June 2013 installation with /sbin/nologin COULD have been installed with a old DVD (say CentOS 6.2) and

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread John Doe
From: Mihamina Rakotomandimby miham...@rktmb.org Default MySQL installation on CentOS sets /bin/bash as shell. I'm on a user cleanup task where I want reduce unneeded privileges to users. Its password should be locked. So you cannot login as mysql but you can su - mysql or run scripts as

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Cliff Pratt
Can you not set up a test system and try it out? Or, if this is your only system, could you not back it up, and test your suggestions out? The mysql shell is for viewing data in your databases and manipulating the data in required. You can also add tables and things like that. It is a powerful

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Mihamina Rakotomandimby
On 01/10/2014 02:25 AM, Cliff Pratt wrote: Can you not set up a test system and try it out? Or, if this is your only system, could you not back it up, and test your suggestions out? I dont have enough unit test in mind to assume it's safe. The mysql shell is for viewing data in your databases

Re: [CentOS] Why does 'mysql' user has /bin/bash shell?

2014-01-09 Thread Luigi Rosa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mihamina Rakotomandimby said the following on 09/01/2014 10:27: Default MySQL installation on CentOS sets /bin/bash as shell. I checked in my CentOS 6 installations. Only one (the latest) has this issue, so it could be something added/modified in