[debian-mysql] Bug#510875: Bug#510875: mysql-server-5.0: does not ask for a password for `root' by default

[Mathias Gug]

On Mon, Jan 05, 2009 at 05:23:34PM +0100, Nico Golde wrote:
> * Ansgar Burchardt <ansgar at 2008.43-1.org> [2009-01-05 16:42]:
> > The question asking for the administrative password has a priority of
> > `medium'.  Debconf's default is to ask only questions of at least
> > priority `high' since 1.4.61 (and d-i apparently sets this value by
> > default even longer).
> > 
> > This results in an empty root password by default.  Every user which
> > can connect from `localhost' has then full administrative privileges.
> > The only thing he has to do is run `mysql -u root'.

FYI the MySQL package in Ubuntu changes the debconf priority to high.

-- 
Mathias Gug
Ubuntu Developer  http://www.ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20090106/18290a6d/attachment.pgp