Bugzilla:FAQ:Bugzilla Security: Difference between revisions
Jump to navigation
Jump to search
m (category:Bugzilla; ~nav) |
m (category|F + remove empty sections, linked fron navigation template) |
||
| Line 1: | Line 1: | ||
=[[Bugzilla:FAQ: | =[[Bugzilla:FAQ:Bugzilla Security|Bugzilla Security]]= | ||
== How do I completely disable MySQL security if it's giving me problems? (I've followed the instructions in the installation section of this guide...)== | == How do I completely disable MySQL security if it's giving me problems? (I've followed the instructions in the installation section of this guide...)== | ||
Run MySQL like this: '''mysqld --skip-grant-tables'''. | Run MySQL like this: '''mysqld --skip-grant-tables'''. | ||
| Line 8: | Line 5: | ||
taping a $100 to the floor of a football stadium bathroom for safekeeping. | taping a $100 to the floor of a football stadium bathroom for safekeeping. | ||
* '''This can't be stressed enough.''' Doing this is a bad idea. Please consult [http://www.bugzilla.org/docs/tip/html/security-mysql.html Section 4.2] of this guide and the MySQL documentation for better solutions. | |||
[http://www.bugzilla.org/docs/tip/html/security-mysql.html Section 4.2] | |||
of this guide and the MySQL documentation for better solutions. | |||
==Are there any security problems with Bugzilla?== | ==Are there any security problems with Bugzilla?== | ||
| Line 18: | Line 13: | ||
on your Bugzilla installation, | on your Bugzilla installation, | ||
and follow the recommended security guidelines found in The Bugzilla Guide. | and follow the recommended security guidelines found in The Bugzilla Guide. | ||
{{Navigation Bugzilla FAQ}} | |||
[[category:Bugzilla]] | [[category:Bugzilla]] | ||
Revision as of 08:05, 13 June 2006
Bugzilla Security
How do I completely disable MySQL security if it's giving me problems? (I've followed the instructions in the installation section of this guide...)
Run MySQL like this: mysqld --skip-grant-tables. Please remember that this makes MySQL as secure as taping a $100 to the floor of a football stadium bathroom for safekeeping.
- This can't be stressed enough. Doing this is a bad idea. Please consult Section 4.2 of this guide and the MySQL documentation for better solutions.
Are there any security problems with Bugzilla?
The Bugzilla code has undergone a reasonably complete security audit, and user-facing CGIs run under Perl's taint mode. However, it is recommended that you closely examine permissions on your Bugzilla installation, and follow the recommended security guidelines found in The Bugzilla Guide.