[Pkg-nagios-devel] Bug#677844: Bug#677844: icinga-web: postinst fails to set root passwd - MYSQL_PWD env var not working

[Markus Frosch]

tags 677844 - unreproducible moreinfo
tags 677844 + fixed pending
thanks

Hello Tom,
> Following your reply, I did some more testing and the cause is
> definitely my .my.cnf.
> I can reproduce the error when install as my user (who has a .my.cnf) with sudo.
> The issue does not occur when .my.cnf is removed.

Thanks, I've fixed that by using an empty defaults file so any 
/root/.my.cnf will be ignored.

The bug will be fixed in the next upload of 1.7.1-1 to unstable.

> I had a look at
> http://dev.mysql.com/doc/refman/5.5/en/password-security-user.html and
> even though using the -p parameter is not advised, the use of
> MYSQL_PWD is not recommended either.

Yes, thats right. The "problem" is that /proc/<processid>/environ might 
be readable to other users.

But I don't think this will be a problem here, because on linux only 
the process owner can read such a file - and root of course.

Please let me know if you have any additions.

Best Regards
Markus Frosch

--
Markus Frosch
markus at lazyfrosch.de
http://www.lazyfrosch.de