[debian-mysql] Bug#571307: mysql-server: security update changes dabian-sys-maint access rights

[José Luis Tallón]

Hi,

Erik Auerswald wrote:
> Package: mysql-server
> Version: 5.0.51a-24+lenny3
> Severity: important
>   
(not downgrading since I'm not the maintainer; One thinks it should be
'wishlist' instead)
> We use the debian-sys-maint account for maintenance tasks, e.g. the daily
> database backup. Therefore this MySQL user needs sufficient access rights,
> which we have manually granted.
>   
Hmmm... it is called *debian*-sys-maint for a reason.
> Installing a security update removes the additional access rights inhibiting
> the database backup.
>   
If the rights are enough for both mysql-server's and dbcommon-depending
packages, it isn't a bug. Or is it ?
> After each security fix we need to manually repair this. Automatic
> installation of security fixes has become unthinkable, because it reliably
> breaks our systems.
>   
My suggestion is to create another, dedicated, user for this purpose.
One can direct mysql tools to use another my.cnf / another user to
authenticate as.


Regards,