Here are the perms on the mysql db files /var/lib/mysql/mysql
Also, I was logged into mysql with a plain user 'jose' that had access to only his
db, 'jose'
grant select,insert,create,drop,delete,alter on jose.* to jose@localhost identified by
'jose';
-rw-rw---- 1 mysql root 0 Aug 10 22:49 columns_priv.MYD
-rw-rw---- 1 mysql root 1024 Aug 10 22:49 columns_priv.MYI
-rw-rw---- 1 mysql root 8778 Aug 10 22:49 columns_priv.frm
-rw-rw---- 1 mysql root 302 Aug 15 13:20 db.MYD
-rw-rw---- 1 mysql root 3072 Aug 15 13:27 db.MYI
-rw-rw---- 1 mysql root 8982 Aug 10 22:49 db.frm
-rw-rw---- 1 mysql root 0 Aug 10 22:49 func.MYD
-rw-rw---- 1 mysql root 1024 Aug 10 22:49 func.MYI
-rw-rw---- 1 mysql root 8641 Aug 10 22:49 func.frm
-rw-rw---- 1 mysql root 0 Aug 10 22:49 host.MYD
-rw-rw---- 1 mysql root 1024 Aug 10 22:49 host.MYI
-rw-rw---- 1 mysql root 8958 Aug 10 22:49 host.frm
-rw-rw---- 1 mysql root 0 Aug 10 22:49 tables_priv.MYD
-rw-rw---- 1 mysql root 1024 Aug 10 22:49 tables_priv.MYI
-rw-rw---- 1 mysql root 8877 Aug 10 22:49 tables_priv.frm
-rw-rw---- 1 mysql root 749 Aug 15 13:31 user.MYD
-rw-rw---- 1 mysql root 2048 Aug 15 13:31 user.MYI
-rw-rw---- 1 mysql root 9148 Aug 10 22:49 user.frm
======================================
On Wed, 15 Aug 2001 14:51:44 -0400
"Andrew Schmidt" <[EMAIL PROTECTED]> wrote:
> I'm not sure how you were able to do that. Especially since you didn't
> provide exactly what you did.
>
> But here's what I get as ROOT (all privileges):
>
> mysql> load data infile '/usr/local/var/db/mysql/mysql/user.MYD' into table
> t;
> ERROR 1085: The file '/usr/local/var/db/mysql/mysql/user.MYD' must be in the
> database directory or be readable by all
> mysql>
>
> since all mysql datafiles are 660 (not readable by all) and do not sit in
> the database directory I'm not sure how you would read in those tables.
>
> The only thing I was able to read in was the .err file
>
> perhaps you can explain in more detail what you did?
>
> thanks,
>
> -- Andrew
>
> ----- Original Message -----
> From: "Jose de Leon" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, August 16, 2001 5:03 AM
> Subject: Looks like any user can read the mysql db!
>
>
> > MySQL 3.23.36
> >
> > Using the LOAD DATA command, I was able to read the first field of
> user.MYD. I think I should
> > be able to load the rest of the table with a little bit of playing
> around...
> >
> > I think with a little bit of ingenious delimeter specification, etc,
> anybody should be able to
> > load any table they want provided they know the path.
> >
> > ---------------------------------------------------------------------
> > Before posting, please check:
> > http://www.mysql.com/manual.php (the manual)
> > http://lists.mysql.com/ (the list archive)
> >
> > To request this thread, e-mail <[EMAIL PROTECTED]>
> > To unsubscribe, e-mail
> <[EMAIL PROTECTED]>
> > Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
> >
> >
---------------------------------------------------------------------
Before posting, please check:
http://www.mysql.com/manual.php (the manual)
http://lists.mysql.com/ (the list archive)
To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
