mirror of
https://abf.rosa.ru/djam/mariadb.git
synced 2025-02-24 07:02:47 +00:00
0132e7e3ec
This package in ROSA was maintained quite poorly, had only a few users and lacked such important features as running multiple instances of MySQL server (mysqld@.service) and scripts for automatic upgrade to newer versions. Also upstream has renamed libraries, now there is mysql-connector-c with devel parts. /srv/mysql is also rather strange, /var/lib/mysql is more common. Let's rebase to a well-maintained package from openSUSE. It is being done in a not released platform without any compatibility for smooth upgrades fromt he old package. The new one has a lower epoch, automatic upgrades won't be done. High epoch is not needed anymore: mysql-community has not been merged from abf.io/rosaserver to abf.io/import, and now the library in mariadb is called libmariadbclient, not libmysqlclient (but compatibility symlinks do exist), so there are no duplicated provides and so there is no need in a high epoch. This commits just imports from openSUSE's SRPM without any changes, the following one will adapt it for ROSA. It will allow to easily see the diff against the openSUSE's package to easify further syncs and contibuting back to SUSE (https://bugzilla.opensuse.org/show_bug.cgi?id=1182218)
21 lines
868 B
Diff
21 lines
868 B
Diff
SUSE specific patch that hardens the auth_pam_tool setuid-root binary.
|
|
Matthias Gerstner wants it as a prerequisite for allowing auth_pam_tool
|
|
setuid-root binary in [bsc#1160285].
|
|
|
|
Index: mariadb-10.4.12/plugin/auth_pam/auth_pam_base.c
|
|
===================================================================
|
|
--- mariadb-10.4.12.orig/plugin/auth_pam/auth_pam_base.c
|
|
+++ mariadb-10.4.12/plugin/auth_pam/auth_pam_base.c
|
|
@@ -149,6 +149,12 @@ static int pam_auth_base(struct param *p
|
|
const char *service = info->auth_string && info->auth_string[0]
|
|
? info->auth_string : "mysql";
|
|
|
|
+ if( strcmp(service, "mysql") != 0 )
|
|
+ {
|
|
+ PAM_DEBUG((stderr, "PAM: rejecting non-standard PAM service %s\n", service));
|
|
+ return CR_ERROR;
|
|
+ }
|
|
+
|
|
param->ptr = param->buf + 1;
|
|
|
|
PAM_DEBUG((stderr, "PAM: pam_start(%s, %s)\n", service, info->user_name));
|