rpms/mysql/devel my.cnf,1.6,1.7 mysql.spec,1.138,1.139

[Tom Lane]

Author: tgl

Update of /cvs/pkgs/rpms/mysql/devel
In directory cvs1.fedora.phx.redhat.com:/tmp/cvs-serv32490

Modified Files:
	my.cnf mysql.spec 
Log Message:
Disable symbolic links by default in /etc/my.cnf


Index: my.cnf
===================================================================
RCS file: /cvs/pkgs/rpms/mysql/devel/my.cnf,v
retrieving revision 1.6
retrieving revision 1.7
diff -u -p -r1.6 -r1.7
--- my.cnf	24 Nov 2009 05:04:04 -0000	1.6
+++ my.cnf	8 Jan 2010 16:00:25 -0000	1.7
@@ -2,6 +2,8 @@
 datadir=/var/lib/mysql
 socket=/var/lib/mysql/mysql.sock
 user=mysql
+# Disabling symbolic-links is recommended to prevent assorted security risks
+symbolic-links=0
 
 # To allow mysqld to connect to a MySQL Cluster management daemon, uncomment
 # these lines and adjust the connectstring as needed.


Index: mysql.spec
===================================================================
RCS file: /cvs/pkgs/rpms/mysql/devel/mysql.spec,v
retrieving revision 1.138
retrieving revision 1.139
diff -u -p -r1.138 -r1.139
--- mysql.spec	5 Jan 2010 17:39:43 -0000	1.138
+++ mysql.spec	8 Jan 2010 16:00:25 -0000	1.139
@@ -1,6 +1,6 @@
 Name: mysql
 Version: 5.1.42
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: MySQL client programs and shared libraries
 Group: Applications/Databases
 URL: http://www.mysql.com
@@ -652,6 +652,10 @@ fi
 %{_mandir}/man1/mysql_client_test.1*
 
 %changelog
+* Fri Jan  8 2010 Tom Lane <tgl at redhat.com> 5.1.42-4
+- Disable symbolic links by default in /etc/my.cnf
+Resolves: #553652
+
 * Tue Jan  5 2010 Tom Lane <tgl at redhat.com> 5.1.42-3
 - Remove static libraries (.a files) from package, per packaging guidelines
 - Change %%define to %%global, per packaging guidelines