Bug#316127: mysql-server-4.1: Please generate random default password for root

[sean finney]

tags 316127 patch
thanks

hey christian, olaf,

attached is a diff against the sid-5.0 trunk that i think should do
what i discussed.  unfortunately i don't have the time to verify
it (i don't have a copy of the latest dfsg tarball), but it's a fairly
small patch and the code is not that complicated.

what do you think?

        sean

-- 

Index: debian/po/templates.pot
===================================================================
--- debian/po/templates.pot     (revision 207)
+++ debian/po/templates.pot     (working copy)
@@ -16,7 +16,7 @@
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <[EMAIL PROTECTED]>\n"
 "Language-Team: LANGUAGE <[EMAIL PROTECTED]>\n"
@@ -168,3 +168,27 @@
 "The MySQL can start on boot time or only if you type '/etc/init.d/mysql "
 "start' manually. Select 'yes' here if you want it to start automatically."
 msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
Index: debian/po/ca.po
===================================================================
--- debian/po/ca.po     (revision 207)
+++ debian/po/ca.po     (working copy)
@@ -6,7 +6,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2004-01-31 19:20GMT\n"
 "Last-Translator: Aleix Badia i Bosch <[EMAIL PROTECTED]>>\n"
 "Language-Team: Debian L10n Catalan <debian-l10n-catalan@lists.debian.org>\n"
@@ -181,6 +181,30 @@
 "init.d/mysql start'. Seleccioneu 'sí' si voleu que s'inicialitzi "
 "automàticament."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #, fuzzy
 #~ msgid ""
 #~ "Should I remove all databases below /var/lib/mysql as you are purging the "
Index: debian/po/cs.po
===================================================================
--- debian/po/cs.po     (revision 207)
+++ debian/po/cs.po     (working copy)
@@ -15,7 +15,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2004-11-27 11:12+0100\n"
 "Last-Translator: Miroslav Kure <[EMAIL PROTECTED]>\n"
 "Language-Team: Czech <[EMAIL PROTECTED]>\n"
@@ -190,6 +190,30 @@
 "etc/init.d/mysql start'. Odpovíte-li kladnì, bude se MySQL spou¹tìt "
 "automaticky."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #~ msgid "Remove all databases?"
 #~ msgstr "Odstranit v¹echny databáze?"
 
Index: debian/po/tr.po
===================================================================
--- debian/po/tr.po     (revision 207)
+++ debian/po/tr.po     (working copy)
@@ -6,7 +6,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2004-06-05 08:53+0300\n"
 "Last-Translator: Gürkan Aslan <[EMAIL PROTECTED]>\n"
 "Language-Team: Turkish <debian-l10n-turkish@lists.debian.org>\n"
@@ -181,6 +181,30 @@
 "halinde elle başlatılabilir. Eğer açılışta otomatik olarak 
başlatılmasını "
 "istiyorsanız burada 'evet'i seçin."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #, fuzzy
 #~ msgid ""
 #~ "Should I remove all databases below /var/lib/mysql as you are purging the "
Index: debian/po/pt_BR.po
===================================================================
--- debian/po/pt_BR.po  (revision 207)
+++ debian/po/pt_BR.po  (working copy)
@@ -7,7 +7,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2004-08-07 15:32-0300\n"
 "Last-Translator: André Luís Lopes <[EMAIL PROTECTED]>\n"
 "Language-Team: Debian-BR Project <debian-l10n-portuguese@lists.debian.org>\n"
@@ -188,6 +188,30 @@
 "Seleccione 'sim' aqui caso você deseje que o MySQL seja iniciado "
 "automaticamente."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #~ msgid "Remove all databases?"
 #~ msgstr "Remover todas as bases de dados ?"
 
Index: debian/po/ru.po
===================================================================
--- debian/po/ru.po     (revision 207)
+++ debian/po/ru.po     (working copy)
@@ -16,7 +16,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1_4.1.11a-2_ru\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2005-05-22 21:56+1000\n"
 "Last-Translator: Yuriy Talakan' <[EMAIL PROTECTED]>\n"
 "Language-Team: Russian <debian-l10n-russian@lists.debian.org>\n"
@@ -197,3 +197,27 @@
 "MySQL может запускаться при загрузке 
системы, либо только если вы вручную "
 "введете команду '/etc/init.d/mysql start'. Выберите 
'да', если хотите "
 "запускать его автоматически."
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
Index: debian/po/fr.po
===================================================================
--- debian/po/fr.po     (revision 207)
+++ debian/po/fr.po     (working copy)
@@ -16,7 +16,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2005-05-24 07:02+0200\n"
 "Last-Translator: Christian Perrier <[EMAIL PROTECTED]>\n"
 "Language-Team: French <debian-l10n-french@lists.debian.org>\n"
@@ -205,6 +205,30 @@
 "init.d/mysql start ». Choisissez cette option si vous voulez que MySQL soit "
 "lancé automatiquement."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #~ msgid "Remove all databases?"
 #~ msgstr "Faut-il supprimer toutes les bases de données ?"
 
Index: debian/po/de.po
===================================================================
--- debian/po/de.po     (revision 207)
+++ debian/po/de.po     (working copy)
@@ -15,7 +15,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2004-04-02 20:44+0200\n"
 "Last-Translator: Alwin Meschede <[EMAIL PROTECTED]>\n"
 "Language-Team:  <gnome-de@gnome.org>\n"
@@ -193,6 +193,30 @@
 "etc/init.d/mysql start' gestartet werden. Hier 'ja' anwählen wenn MySQL "
 "automatisch starten soll."
 
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
+
 #, fuzzy
 #~ msgid ""
 #~ "Should I remove all databases below /var/lib/mysql as you are purging the "
Index: debian/po/ja.po
===================================================================
--- debian/po/ja.po     (revision 207)
+++ debian/po/ja.po     (working copy)
@@ -16,7 +16,7 @@
 msgstr ""
 "Project-Id-Version: mysql-dfsg-4.1 4.1.11a-2\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2005-07-10 00:02+0200\n"
+"POT-Creation-Date: 2005-08-06 23:50-0400\n"
 "PO-Revision-Date: 2005-05-23 03:33+0900\n"
 "Last-Translator: Hideki Yamane <[EMAIL PROTECTED]>\n"
 "Language-Team: Japanese <debian-japanese@lists.debian.org>\n"
@@ -196,3 +196,27 @@
 msgstr ""
 "MySQL ¤Ï¥·¥¹¥Æ¥àµ¯Æ°»þ¤« '/etc/init.d/mysql start' ¤ò¼êÆ°¤ÇÆþÎϤ·¤¿¤È¤­¤Î¤ß¤Ë"
 "µ¯Æ°¤Ç¤­¤Þ¤¹¡£¼«Æ°Åª¤Ëµ¯Æ°¤µ¤»¤¿¤¤¾ì¹ç¤Ï¡¢¤³¤³¤Ç¡Ö¤Ï¤¤¡×¤òÁª¤ó¤Ç¤¯¤À¤µ¤¤¡£"
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid "Please provide an administrative password for MySQL."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"It appears as though your current MySQL server does not have a currently "
+"have a password set for the administrative ('root') account.  If you are "
+"installing MySQL on a multi-user system, this can be considered a severe "
+"security risk."
+msgstr ""
+
+#. Type: password
+#. Description
+#: ../mysql-server-5.0.templates:67
+msgid ""
+"If you choose not to provide a password, you will be able to connect as the "
+"administrative user without restrictions and can set the password later."
+msgstr ""
Index: debian/changelog
===================================================================
--- debian/changelog    (revision 207)
+++ debian/changelog    (working copy)
@@ -1,3 +1,10 @@
+mysql-dfsg-5.0 (5.0.10beta-2) UNRELEASED; urgency=low
+
+  * Sean Finney:
+    - add debconf support for setting admin password (closes: #316127).
+
+ -- sean finney <[EMAIL PROTECTED]>  Sat, 06 Aug 2005 23:48:54 -0400
+
 mysql-dfsg-5.0 (5.0.10beta-1) unstable; urgency=low
 
   * New upstream release.
Index: debian/mysql-server-5.0.postinst
===================================================================
--- debian/mysql-server-5.0.postinst    (revision 207)
+++ debian/mysql-server-5.0.postinst    (working copy)
@@ -181,4 +181,21 @@
 db_stop # in case invoke failes
 #DEBHELPER#
 
+# restart debconf because we stopped for invoke
+. /usr/share/debconf/confmodule 
+# test for passwordless root account
+if mysql -u root </dev/null; then
+       db_input high mysql-server-5.0/create_root_password || true
+       db_go || true
+       db_get mysql-server-5.0/create_root_password && rootpw="$RET"
+       # only if they provided something should we do anything.
+       if [ "$rootpw" ]; then
+               cat << EOF | mysql -u root mysql
+UPDATE user SET password=PASSWORD('$rootpw') WHERE user='root';
+FLUSH PRIVILEGES;
+EOF
+       fi
+fi
+db_stop # just to be thorough...
+
 exit 0
Index: debian/mysql-server-5.0.templates
===================================================================
--- debian/mysql-server-5.0.templates   (revision 207)
+++ debian/mysql-server-5.0.templates   (working copy)
@@ -61,3 +61,15 @@
 _Description: Should MySQL start on boot?
  The MySQL can start on boot time or only if you type '/etc/init.d/mysql
  start' manually. Select 'yes' here if you want it to start automatically.
+
+Template: mysql-server-5.0/create_root_password
+Type: password
+_Description: Please provide an administrative password for MySQL.
+ It appears as though your current MySQL server does not have a currently
+ have a password set for the administrative ('root') account.  If you
+ are installing MySQL on a multi-user system, this can be considered a
+ severe security risk.
+ .
+ If you choose not to provide a password, you will be able to connect as
+ the administrative user without restrictions and can set the password
+ later.

signature.asc
Description: Digital signature