From 1522deafdad1d34562d8daa21ba218fc8f395d83 Mon Sep 17 00:00:00 2001 From: Gabriel Filion Date: Wed, 13 May 2015 16:02:36 -0400 Subject: mysql root password is leaked to the process list Every time the root password reset is used we're leaking the password to the process list. If we use the already present /root/.my.cnf for credentials then it has the same effect for verification and we avoid leaking the password. --- files/scripts/CentOS/setmysqlpass.sh.6 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'files/scripts/CentOS/setmysqlpass.sh.6') diff --git a/files/scripts/CentOS/setmysqlpass.sh.6 b/files/scripts/CentOS/setmysqlpass.sh.6 index abd0931..b904487 100644 --- a/files/scripts/CentOS/setmysqlpass.sh.6 +++ b/files/scripts/CentOS/setmysqlpass.sh.6 @@ -4,7 +4,7 @@ test -f /root/.my.cnf || exit 1 rootpw=$(grep password /root/.my.cnf | sed -e 's/^[^=]*= *\(.*\) */\1/') -/usr/bin/mysqladmin -uroot --password="${rootpw}" status > /dev/null && echo "Nothing to do as the password already works" && exit 0 +/usr/bin/mysqladmin --defaults-file=/root/.my.cnf status > /dev/null && echo "Nothing to do as the password already works" && exit 0 /sbin/service mysqld stop -- cgit v1.2.3