----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 30, 2004 3:01 AM Subject: i found something ugly about freeBSD
> Am probably wrong i hope. Yes, you are. :) > ... but mysqld creates a file call /tmp/mysql.sock, > but this file got to be 777??? Yeah, well, that's the general idea; everybody can read/write to the mysqld server socket: from "nobody" (web server) to root. > ...i loging with a other user and call a rm /tmp/mysql.sock Set the sticky bit (+t) on /tmp/, and only the owner of the mysql socket will be able to delete it. - Mark _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"