Bugzilla:FAQ:Bugzilla Security: Difference between revisions

From MozillaWiki
Jump to navigation Jump to search
(Bugzilla:FAQ 4. Bugzilla Security)
 
(Blanked the page)
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
=[[Bugzilla:FAQ:General_Questions|General Questions]]=
=[[Bugzilla:FAQ:Managerial_Questions|Managerial Questions]]=
=[[Bugzilla:FAQ:Administrative_Questions|Administrative Questions]]=
=[[Bugzilla:FAQ:Bugzilla_Security|Bugzilla Security]]=
== How do I completely disable MySQL security if it's giving me problems? (I've followed the instructions in the installation section of this guide...)==
Run MySQL like this: '''mysqld --skip-grant-tables'''.
Please remember that this makes MySQL as secure as
taping a $100 to the floor of a football stadium bathroom for safekeeping.


#This can't be stressed enough. Doing this is a bad idea. Please consult
[http://www.bugzilla.org/docs/tip/html/security-mysql.html Section 4.2]
of this guide and the MySQL documentation for better solutions.
==Are there any security problems with Bugzilla?==
The Bugzilla code has undergone a reasonably complete security audit,
and user-facing CGIs run under Perl's taint mode.
However, it is recommended that you closely examine permissions
on your Bugzilla installation,
and follow the recommended security guidelines found in The Bugzilla Guide.
=[[Bugzilla:FAQ:Bugzilla_Email|Bugzilla Email]]=
=[[Bugzilla:FAQ:Bugzilla_Database|Bugzilla Database]]=
=[[Bugzilla:FAQ:Bugzilla_and_Win32|Bugzilla and Win32]]=
=[[Bugzilla:FAQ:Bugzilla_Usage|Bugzilla Usage]]=
=[[Bugzilla:FAQ:Bugzilla_Hacking|Bugzilla Hacking]]=

Latest revision as of 13:26, 19 March 2010