Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the "Configure MySql for easy access as root user" step opt-in #34

Open
boosh opened this issue Jul 29, 2015 · 2 comments
Open

Make the "Configure MySql for easy access as root user" step opt-in #34

boosh opened this issue Jul 29, 2015 · 2 comments

Comments

@boosh
Copy link

boosh commented Jul 29, 2015

I think it's a bad idea to have the root DB pw written to disk, even in /root. Arguably if a user has got root access you're screwed anyway, but since I only found that this file was being written while working on something else I think it should be opt-in only for extra security.

@soupdiver
Copy link
Contributor

Hmmm yeah I see that point.

@pjan Any specific thoughts about that or did you had some special use cases in mind when writing that file to disk?

The mysql password is stored in the playbook anyway and nothing randomly generated which the user may doesn't know

@patrickheeney
Copy link

This would be simple to add right?

- name: MySQL | Configure MySql for easy access as root user
  template:
    src: root_dot_my.cnf.j2
    dest: /root/.my.cnf
    owner: root
    group: root
    mode: 0600
  when: mysql_create_root_conf is defined and mysql_create_root_conf == true

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants